The Role
Design, implement, and manage enterprise security controls across Microsoft 365, EDR, DLP, IAM, and vulnerability management. Lead cloud security, patching audits, data protection, SDLC security integration, phishing simulations, vendor risk assessments, and threat research to improve detection, response, and remediation.
Summary Generated by Built In
We work alongside the best and brightest to do incredibly cool things you wouldn't believe. At Roush, you're part of building the future. Are you someone that has a passion for providing innovated solutions to complex challenges? Do you want to work someplace where creativity and new ideas are encouraged? If so, then keep reading.
We fuse technology and engineering to provide product development solutions to customers in a diverse range of industries. Widely recognized for providing engineering, testing, prototype, and manufacturing services to the transportation industry, Roush also provides significant support to the aerospace, defense, and theme park industries. With over 2,400 employees in facilities throughout the United States, Europe, Asia, and South America, our unique combination of creativity and tenacity activates big ideas on a global stage.
Are you looking for a new challenge? Roush is looking to add a Cyber Security Architect II to join their team. Roush is looking for a Cyber Security Architect to design, implement, and manage enterprise security controls across Microsoft 365, EDR tools, Vulnerability Management, and Data Loss Prevention (DLP) solutions. This is a hybrid role, based in Livonia Michigan.
As a Cyber Security Architect II, you will:
We fuse technology and engineering to provide product development solutions to customers in a diverse range of industries. Widely recognized for providing engineering, testing, prototype, and manufacturing services to the transportation industry, Roush also provides significant support to the aerospace, defense, and theme park industries. With over 2,400 employees in facilities throughout the United States, Europe, Asia, and South America, our unique combination of creativity and tenacity activates big ideas on a global stage.
Are you looking for a new challenge? Roush is looking to add a Cyber Security Architect II to join their team. Roush is looking for a Cyber Security Architect to design, implement, and manage enterprise security controls across Microsoft 365, EDR tools, Vulnerability Management, and Data Loss Prevention (DLP) solutions. This is a hybrid role, based in Livonia Michigan.
As a Cyber Security Architect II, you will:
- Lead the implementation and optimization of security and compliance capabilities within Microsoft 365, ensuring alignment with Roush’s security requirements and regulatory requirements.
- Design, implement, and manage Identity and Access Management (IAM) strategies, including role-based access control (RBAC), least privilege principles and multi-factor authentication (MFA) solutions, etc.
- Perform vulnerability assessments and remediation. Collaborate with technical teams to prioritize and remediate vulnerabilities based on risk.
- Audit endpoint and server patching processes to identify gaps, ensure timely remediation, and improve overall patch compliance.
- Define and implement technical and business processes for data protection, leveraging tools to safeguard sensitive data and ensure privacy, security, and integrity.
- Collaborate with DevOps teams to integrate security practices into the software development lifecycle (SDLC), including secure coding standards, code review processes, and automated security testing.
- Lead cyber security education and simulated phishing tests
- Evaluate and manage third-party vendor security risks, conduct security assessments and ensure business associates comply with security requirements.
- Conduct ongoing research into evolving threat landscapes, vulnerabilities, and mitigation techniques to inform detection, response, and remediation strategies.
- Bachelor’s degree in computer science, Computer Engineering, or related experience.
- Minimum of 5 years of hands-on experience managing Microsoft 365 security tools or comparable cloud platforms (e.g., Vulnerability Management, EDR) with a strong focus on risk-based remediation.
- U.S. Citizen or U.S. Permanent Resident allowing for International Traffic in Arms Regulations (ITAR) compliance.
- Experience with cloud-delivered commercial and government-based solutions such as Microsoft M365-E5/Azure, Amazon Web Services and Google Cloud Platform, and experience with IT backup and disaster recovery systems.
- Working knowledge of NIST CSF, 800-171, CMMC, ISO-27001, TISAX, MS-365 Security & Compliance, DLP, SIEM, EDR, Email Security, Vulnerability Management, Incident management, TCP/IP (Transmission Control Protocol/Internet Protocol), DNS (Domain Name System), and DHCP (Dynamic Host Configuration Protocol).
- Knowledge of firewalls, switches, servers (Windows, LINUX) and databases.
- Understanding and proficiency with SAN (Storage Area Network) and NAS (Network Attached Storage), Local Area Network (LAN) and Wide Area Network (WAN) concepts and configurations such as routing, cabling, VPN (Virtual Private Network), and ISPs (Internet Service Providers) options and capabilities.
- Ability to act effectively as a technical resource.
- Excellent communication skills including ability to interact effectively with customers, vendors, and team members and strong leadership and organizational skills
- Master’s degree in business or information technology or related field.
- Minimum 5 years of professional experience supporting, securing, and maintaining networks, servers, and cloud environments.
- Certification(s) in information security such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), etc.
- Hands-on experience designing, implementing, and operating enterprise security controls, platforms, and tooling across cloud and on-prem environment
Our full-time benefits include: medical, dental, vision, life insurance, earned sick time, STD, LTD, 401K, tuition reimbursement, paid vacation, paid holidays, and more.
If you share our passion for providing innovative solutions to complex challenges, we want you on our team.
Please visit our careers page and apply by clicking on this link: https://jobs.roush.com/us/en/
Visit our website: www.roush.com
Like us on Facebook: www.facebook.com/RoushCareers
Roush is an EO employer – Veterans/Disabled and other protected categories
If you need a reasonable accommodation for our employment application process due to disability, please contact Roush Talent Acquisition at 734-779-7087.
#Zip
If you share our passion for providing innovative solutions to complex challenges, we want you on our team.
Please visit our careers page and apply by clicking on this link: https://jobs.roush.com/us/en/
Visit our website: www.roush.com
Like us on Facebook: www.facebook.com/RoushCareers
Roush is an EO employer – Veterans/Disabled and other protected categories
If you need a reasonable accommodation for our employment application process due to disability, please contact Roush Talent Acquisition at 734-779-7087.
#Zip
Skills Required
- Bachelor's degree in Computer Science, Computer Engineering, or related experience
- Minimum 5 years hands-on experience managing Microsoft 365 security tools or comparable cloud security platforms (EDR, Vulnerability Management)
- U.S. Citizen or U.S. Permanent Resident (ITAR compliance)
- Experience with Microsoft M365-E5/Azure, AWS, or Google Cloud Platform and IT backup/disaster recovery systems
- Working knowledge of NIST CSF, NIST SP 800-171, CMMC, ISO-27001, TISAX
- Experience with MS-365 Security & Compliance, DLP, SIEM, EDR, Email Security, Vulnerability Management, and incident management
- Networking fundamentals: TCP/IP, DNS, DHCP, LAN/WAN, routing, VPN, cabling, ISPs
- Knowledge of firewalls, switches, servers (Windows, Linux) and databases
- Understanding/proficiency with SAN and NAS storage concepts
- Ability to act effectively as a technical resource and collaborate with DevOps to integrate security into SDLC
- Excellent communication, leadership, and organizational skills
- Master's degree in business or information technology or related field
- Professional information security certifications (e.g., CISSP, CISM)
- Hands-on experience designing, implementing, and operating enterprise security controls across cloud and on-prem environments
- Minimum 5 years professional experience supporting, securing, and maintaining networks, servers, and cloud environments
Roush Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Roush and has not been reviewed or approved by Roush.
-
Healthcare Strength — Health coverage is described as platinum-level and affordable, including medical, dental, vision, prescription coverage, telemedicine, and wellness supports such as EAP, diabetes, and tobacco-cessation programs. Core protections like short- and long-term disability and life/AD&D are highlighted as strengths.
-
Retirement Support — An employer-matched 401(k) is emphasized, with plan features such as profit-sharing elements, auto-enrollment, and loan availability that enhance accessibility. The retirement offering is characterized as competitive and a standout within the package.
-
Leave & Time Off Breadth — Paid vacation, paid holidays, and earned sick time are provided alongside leaves for family/medical needs, pregnancy/adoption, military duty, jury duty, and bereavement. The breadth supports varied time-off needs across different life events.
Roush Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
With a relentless spirit of possibilities, a challenge-driven culture, and an unmatched suite of capabilities, Roush creates remarkable and inspiring solutions for some of the world’s greatest organizations.
