IoT & Connected Devices Security Architect

Work Location Type: Remote
Req Number 335874
About Grainger
W.W. Grainger, Inc. is a leading broad line distributor with operations primarily in North America and Japan. At Grainger, We Keep the World Working® by serving more than 4.6 million customers worldwide with maintenance, repair and operating (MRO) products and value-added solutions delivered through innovative technology and deep customer expertise. Known for its commitment to service and purpose-driven culture, the Company reported 2025 revenue of $17.9 billion. For more information, visit www.grainger.com.
Compensation
The anticipated base pay compensation range for this position is $146,200.00 - $243,600.00. This role is eligible for an incentive target of up to 20% or $, based on the achievement of individual and company performance objectives in accordance with the current terms of the incentive program which are subject to change.
Rewards and Benefits
With benefits starting on day one, our programs provide choice and flexibility to meet team members' individual needs, including:

• Medical, dental, vision, and life insurance plans with coverage starting on day one of employment and 6 free sessions each year with a licensed therapist to support your emotional wellbeing.
• 18 paid time off (PTO) days annually for full-time employees (accrual prorated based on employment start date) and 6 company holidays per year.
• 6% company contribution to a 401(k) Retirement Savings Plan each pay period, no employee contribution required.
• Employee discounts, tuition reimbursement, student loan refinancing and free access to financial counseling, education, and tools.
• Maternity support programs, nursing benefits, and up to 14 weeks paid leave for birth parents and up to 4 weeks paid leave for non-birth parents.

For additional information and details regarding Grainger's benefits, please click on the link below:
https://experience100.ehr.com/grainger/Home/Tools-Resources/Key-Resources/New-Hire
Grainger Benefits
The pay range provided above is not a guarantee of compensation. The range reflects the potential base pay for this role at the time of this posting based on the job grade for this position. Individual base pay compensation will depend, in part, on factors such as geographic work location and relevant experience and skills.
The anticipated compensation range described above is subject to change and the compensation ultimately paid may be higher or lower than the range described above.
Grainger reserves the right to amend, modify, or terminate its compensation and benefit programs in its sole discretion at any time, consistent with applicable law.
Position Details
The Information Security team protects all of Grainger, from our systems to our data across the global company. Our infrastructure is powered by cloud, on-premises, and SaaS platforms that keep Grainger, and our customers, working. We use modern tools and practices to stay ahead of evolving security challenges.
The mission of the Security Architecture team is to be the strategic security design partner for Grainger's technology systems. This role owns the security architecture for Grainger's IoT and connected devices, including KeepStock vending platforms at customer sites across North America, AI-enabled vending systems using edge computer vision, and the cloud, web, and identity services that support them.
In this senior role, you will establish consistent fleet security baselines and build security into the multi-year product roadmap and rationalized platform set. The role pairs deep IoT and embedded expertise with broad security architecture across cloud, web applications and APIs, identity, and endpoint security. Success requires understanding customer environments, business priorities, and field operations well enough to align stakeholders on risk, cost, reliability, and customer experience.
In this individual contributor role, you will report to the Director of Cybersecurity Architecture and may be based remotely or at our offices in the Chicago area.
You will

• Own security architecture and posture across device fleets, edge platforms, and supporting cloud, web, and identity services, and lead platform rationalization into a consistent target state

• Partner with senior business, product, engineering, operations, and security stakeholders to align priorities, translating business context into security requirements, security risk into business impact, and decisions into actionable engineering direction

• Serve as the security design authority for connected systems in Grainger's architecture governance process, engaging early enough to shape hardware, platform, and vendor decisions

• Lead security architecture for the cloud platforms, web applications, and APIs that manage the fleet, including cloud IAM, web application firewalls, API protection, and secrets management, partnering with domain architects to reach the target state

• Lead threat modeling across devices, edge platforms, connectivity, cloud services, web applications and APIs, and field workflows, including physical tampering, device cloning, and unattended operation

• Define measurable security baselines for field devices on commercial and embedded operating systems, tailored to device capability and risk, covering hardening, secure boot, disk encryption, and endpoint detection and response

• Establish secure delivery patterns for edge software and AI models, including signing, provenance, staged rollout, rollback, and software and model bills of materials

• Secure edge AI models and inference, balancing security, privacy, latency, cost, and customer experience in placement decisions

• Create device trust architectures covering unique identities, secure onboarding, PKI, certificate lifecycle, secrets protection, mutual authentication, and least-privilege device messaging

• Design identity and access patterns for devices, services, technicians, administrators, vendors, and customers, including federation, privileged access, and auditable device-specific authorization

• Architect secure connectivity across cellular, satellite, Wi-Fi, and wired deployments, including carrier strategy, failover, and isolation from customer networks

• Shape endpoint and fleet telemetry, vulnerability management, compromised-device containment, and recovery with engineering and security operations teams

• Communicate security posture to leadership through metrics and KPIs, and mentor peers and junior architects through design reviews

You have

• Deep security architecture expertise in large-scale IoT, embedded, or edge systems, plus broad enterprise architecture experience, owning strategy and target state rather than firmware or platform administration

• 10+ years in information security or related engineering, including 8+ years in security architecture across multiple domains, with at least 4 years focused on IoT, embedded, or edge systems

• Preferred: experience in connected retail, industrial IoT, robotics, or comparable edge devices, and certifications such as CISSP, CCSP, or relevant cloud, Linux, or industrial cybersecurity credentials

• Proven ability to align senior stakeholders behind multi-year direction and to rationalize overlapping or acquired technology portfolios through capability mapping and migration strategy

• Strong experience with cloud-connected IoT and network architectures, including edge runtimes, MQTT, messaging authorization, segmentation from customer environments, and cellular, satellite, Wi-Fi, and wired connectivity

• Solid cloud, application, and identity architecture experience, including cloud IAM, web application firewalls, API gateways, secrets management, federation, MFA, and privileged access management

• Expert understanding of device trust and device-scale PKI, including hardware roots of trust (TPM, secure elements, HSMs), secure and measured boot, attestation, certificate rotation and revocation, and how they fail

• Experience hardening commercial and embedded operating systems to IoT security standards, including endpoint detection and response, vulnerability management, and secure OTA updates with signing and rollback protection

• Experience defining fleet security telemetry, containment, and recovery patterns, and turning incident findings into architecture improvements

• Working knowledge of edge computer vision security, including model protection, adversarial inputs, MLOps across edge and cloud, and privacy obligations for camera and sensor data

• Strong communication skills, including the ability to translate technical concepts for executives and defend architectural positions with evidence

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex (including pregnancy), national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or expression, protected veteran status or any other protected characteristic under federal, state, or local law. We are proud to be an equal opportunity workplace.
We are committed to fostering an inclusive, accessible work environment that includes both providing reasonable accommodations to individuals with disabilities during the application and hiring process as well as throughout the course of one's employment, should you need a reasonable accommodation during the application and selection process, including, but not limited to use of our website, any part of the application, interview or hiring process, please advise us so that we can provide appropriate assistance.