About this opportunity
Ericsson is a global leader in telecommunications and technology, driving innovation and connectivity worldwide. We are committed to creating a sustainable future through cutting-edge solutions and services.
We are now looking for an IT Product Architect – Endpoint Security to join our Computer & Mobile Product Line.
About Employee Experience – Product Line Computer & Mobile
PL Computer & Mobile delivers managed End User Computing, Privileged Access Workstation, Mobile Workplace and Endpoint Security to Ericsson’s workforce & suppliers globally. We manage approx. 200.000endpoints in a multi-OS environment, using Microsoft Intune as Unified Endpoint Management. Our mission is to deliver an industry’s leading computer & mobile experience to our Ericsson workforce. We do this based on our core principles; end-user experience, security, sustainability and economies of scale.
Key responsibilities
Own the end-to-end technical architecture of Endpoint Security.- Architectural expert in Endpoint Privileged Management (EPM), Endpoint Protection Platform (EPP), Microsoft defender for Endpoint DLP & Strong Authentication.
- Lead the Configuration, and management of Endpoint Privilege Management (EPM) solutions like CyberArk EPM across enterprise endpoint environments.
- Define and manage application control, privilege elevation, trust, and script distribution policies based on business requirements.
- Responsible for designing, governing, and evolving endpoint protection at enterprise scale using CrowdStrike Falcon.
- Responsible for building a scalable, resilient, and integrated endpoint security architecture, ensuring alignment with enterprise security strategy, regulatory requirements, and operational efficiency.
- Lead design, architecture, and governance of Microsoft Defender for Endpoint deployed in passive mode across the enterprise.
- Enable EDR capabilities, telemetry enrichment, and layered detection while ensuring seamless coexistence with CrowdStrike as a primary endpoint protection platform (EPP).
- Facilitate Phish-resistant authentication method enrollment for all users across Ericsson.
- Anchor usage/adoption of only phish-resistant credentials while accessing all applications across multiple devices for all types of users.
