IT Cybersecurity Architect

Candidates must be authorized to work in the United States without the need for current or future visa sponsorship.

    "This position is for full-time, onsite employment at the Family Dollar Chesapeake, VA Store Support Center."

General Summary:

The Cybersecurity Architect is responsible for designing and delivering a scalable, cost-effective security architecture across a distributed retail enterprise. This role secures POS environments, cloud platforms, and corporate systems, while embedding security into engineering workflows and supporting high-volume, low-margin operations. This role partners closely with the Enterprise Architecture team to support enterprise-driven initiatives while providing guidance to strengthen security and reduce enterprise risk.

The Cybersecurity team is looking for a passionate individual who wants to make an impact in multiple environments. Family Dollar is looking for a detailed and results oriented Security Architect who will be responsible for designing, embedding, and scaling a secure architecture across a large-scale retail environment spanning stores, distribution centers, data centers, and multi-cloud platforms.  This individual’s role is critical to the strategic and tactical success of Family Dollar’s cybersecurity program and will be responsible for providing direction of our security engineering and operational solutions and cybersecurity tool stack.​

Under the direction of the Director of Cybersecurity Engineering and Operations, the Cybersecurity Architect takes a lead role in ensuring the security of all protected information collected, used, maintained, or released by Family Dollar.  This position plays a vital role in ensuring the confidentiality, integrity and availability of our data; and is critical in the face of an ever-evolving landscape of cyber threats and attacks.

Principal Duties & Responsibilities:

• Define and implement enterprise security architecture standards across retail, cloud, and corporate environments

• Develop reference architectures for Zero Trust, store connectivity, and cloud security models

• Partner with engineering teams to review and secure solution designs prior to deployment

• Lead Architecture Review Board (ARB) governance to enforce secure design decisions

• Integrate security controls into CI/CD pipelines and Infrastructure-as-Code (IaC) frameworks

• Design and implement identity-first security architecture, including MFA and privileged access controls

• Advance Zero Trust adoption across distributed store and enterprise environments

• Architect secure cloud environments (AWS/Azure) with strong segmentation and posture management

• Collaborate with engineering teams to operationalize cloud security tools (e.g., CSPM platforms)

• Define and optimize enterprise security tooling strategy across endpoint, network, and email security

• Apply threat-informed defense strategies aligned to MITRE ATT&CK framework

• Conduct threat modeling and reduced attack surface across POS, e-commerce, and supply chain systems

• Ensure compliance with PCI DSS 4.0 and NIST Cybersecurity Framework (CSF)

• Support audit readiness, risk assessments, and remediation planning

• Design scalable architectures supporting divestitures and Transitional Service Agreements (TSAs)

• Enable secure system separation, migration, and third-party onboarding/offboarding

Position Requirements:

• 7+ years of cybersecurity experience, including hands-on senior security engineering roles

• 2+ years leading or managing a technical security team (e.g., Incident Response, Engineering team)., bringing strong analytical and problem-solving skills and fostering a culture of security awareness and compliance within the organization.

• 10+ years of advanced IT skills with deep exposure to information security.

• 5+ years of experience interfacing with varying levels of leadership and roles within a company, influencing security change.​

• Proven experience leveraging and implementing cybersecurity frameworks such as, MITRE ATTACK, MITRE D3FEND, OWASP Top 10, CIS Controls, NIST CSF, NIST 800-53, etc.

• Proven experience in retail, multi-site, or distributed enterprise environments

• Hands-on experience securing POS systems, store networks, or high-volume transaction systems

• Experience embedding security into engineering and DevOps workflows

• Demonstrated ability to balance security effectiveness with cost and operational efficiency

• Proven experience planning and managing security projects.​

• Excellent interpersonal, communication, and presentation skills, including formal report writing experience.​

• Understanding of common security standards and regulations relating to a retail environment (e.g., PCI DSS, NIST CSF, ISO2700x, etc.)​

• Minimum of 5 years’ experience with modern security tool stacks​

• Network security tools (e.g., WAF, Proxies, IDS/IPS, VPN, Taps, Firewalls)​

• Endpoint security tools (e.g., AV, EDR, Application Control, PKI)​

• Security Operations tools (e.g., SIEM)​

• Messaging security tools (e.g. Email Firewall)

• Authentication and authorization tools (e.g., PAM, SSO, SAML, IAM, MFA)​

• Data Security tools (e.g., eDiscovery, DSPM)​

• Cloud (e.g., CSPM) and other implications of cybersecurity​

• Strong knowledge of cybersecurity concepts​

• Secure protection and detection techniques​

• Application security​

• Vulnerability management​

• Exploitation techniques​

• Incident response​

• Data privacy and encryption​

• Endpoint platforms (Windows, Linux & Mac, iOS/Android)

Preferred Requirements:

• Experience in discount, grocery, or big-box retail environments

• Experience with Zero Trust implementations at scale

• Familiarity with modern identity platforms (e.g., Okta, Entra ID, Active Directory)

• Experience supporting M&A, divestitures, or large-scale transformations

• Industry certifications (e.g., CASA, CISSP, CISM, CCSP, PCIP)

“Projected Salary Range: $106,500 to $133,000"

Family Dollar is an equal opportunity employer and committed to recruiting, hiring, training, and promoting qualified people of all backgrounds, and make all employment decisions without regard to any protected status. We are committed to complying with the Americans with Disabilities Act (ADA) and providing reasonable accommodations to qualified individuals with disabilities.