Security Compliance Architect

About the Role:
We are seeking an experienced Security Compliance Architect to lead a high-impact enterprise initiative focused on improving workstation patch compliance and reducing vulnerability risk across a large-scale endpoint environment. This role is ideal for professionals with extensive experience in endpoint security, patch management, vulnerability remediation, and modern endpoint tools such as Microsoft Intune, SCCM, Autopatch, and Qualys.
You will play a pivotal role in shaping the future of endpoint compliance for a U.S.-based Fortune 50 enterprise, leading efforts across 200,000+ Windows and Linux endpoints. This position includes strategic leadership, hands-on architecture, and collaboration with cross-functional teams, including IT security, engineering, compliance, and operations.
Key Responsibilities:
Architect and lead the patching and remediation strategy across 200,000+ workstations (Windows, Linux, physical, virtual)
Analyze vulnerability data from Qualys and other scanning platforms to prioritize remediation
Guide implementation and optimization of tools like SCCM, Microsoft Intune, MEC, Autopatch, and Cloudpatch
Automate patch workflows using scripting languages (e.g., PowerShell, Python)
Report patch compliance metrics and remediation progress to senior leadership
Lead the transition from SCCM to Microsoft Intune, aligning with modern endpoint management practices
Collaborate on the creation of dashboards, KPIs, and compliance reports
Identify opportunities to leverage AI and automation for vulnerability reduction
Ensure remediation strategies align with GRC standards (e.g., NIST, ISO 27001).

Required Qualifications:
10+ years of experience in endpoint security, patching, or vulnerability remediation
Hands-on expertise with SCCM, Intune, Autopatch, MEC, and Qualys
Strong background with Windows and Linux OS environments
Proficiency in scripting and automation using PowerShell, Python, or similar tools
Proven ability to reduce large-scale vulnerability backlogs in enterprise environments
Excellent communication skills; capable of presenting to executive-level stakeholders
Experience in large, matrixed enterprise settings
Strong understanding of patch compliance metrics, dashboards, and reporting.

Preferred Qualifications:
Experience with Big 4 consulting firms or global enterprises
Familiarity with AI/GenAI tools for security automation and analysis
Knowledge of GRC frameworks: NIST, ISO 27001, etc.
Hands-on experience with other patching tools like BigFix or Cloudpatch