Job Description

Acuity Inc. (NYSE: AYI) is a market-leading industrial technology company. We use technology to solve problems in spaces, light and more things to come. Through our two business segments, Acuity Brands Lighting (ABL) and Acuity Intelligent Spaces (AIS), we design, manufacture, and bring to market products and services that make a valuable difference in people’s lives.

We achieve growth through the development of innovative new products and services, including lighting, lighting controls, building management solutions, and an audio, video and control platform. We focus on customer outcomes and drive growth and productivity to increase market share and deliver superior returns. We look to aggressively deploy capital to grow the business and to enter attractive new verticals.

Acuity Inc. is based in Atlanta, Georgia, with operations across North America, Europe and Asia. The Company is powered by approximately 13,000 dedicated and talented associates. Visit us at www.acuityinc.com

Acuity Brands is seeking a highly experienced and hands-on Security Architect to lead the design and implementation of secure architectures across our cloud-native platforms, connected products, and enterprise applications.

Key Tasks & Responsibilities (Essential Functions)

This role requires strong expertise in cloud security (Azure-first), CNAPP, and modern DevSecOps practices, with a focus on proactively reducing risk across infrastructure, workloads, and application pipelines. You will drive security across the full product lifecycle—embedding controls into architecture, development, and operations—while partnering closely with engineering, DevOps, and platform teams.

Skills and Minimum Experience Required

Cloud Security Architecture & CNAPP

Lead secure design and architecture reviews for cloud-native and distributed systems, including IoT-integrated platforms
Experience with leading CNAPP platforms such as Microsoft Defender for Cloud, Prisma Cloud, Wiz, Orca Security, or Lacework, including their use for posture management, workload protection, and identity risk analysis. Own and drive Cloud-Native Application Protection Platform (CNAPP) capabilities, including:
- CSPM (posture management and misconfiguration detection)
- CWPP (runtime protection for VMs, containers, serverless)
- CIEM (identity entitlement and least privilege enforcement)
- Kubernetes and container security (AKS, image hardening, runtime controls)
Experience defining and enforcing cloud security guardrails, landing zone controls, and policy-as-code frameworks
Define and enforce cloud security baselines, guardrails, and landing zone standards
Assess and secure:

AKS/Kubernetes environments
Infrastructure-as-Code (Terraform, ARM, Bicep)
Service-to-service and API communication patterns

DevSecOps & Automation

Integrate security controls into CI/CD pipelines, enabling both shift-left and runtime security
Drive adoption of:

SAST, DAST, SCA Toolchain
Container and IaC scanning
Policy-as-code for scalable enforcement

Security Governance & Enablement

Define and maintain cloud security standards, patterns, and reusable controls
Drive continuous improvement in security posture and maturity across development teams
Influence cross-functional teams to adopt secure-by-design and Zero Trust principles

Education

Bachelor of Science in Computer Science or Information Technology

Preferred Skills and Experience

Effectively document and communicate security assessment findings, recommendations, and remediation strategies to a diverse audience, including technical teams and non-technical business stakeholders, ensuring clarity and actionable guidance for all parties involved.
Demonstrable ability to analyze business direction and problems, understand long term vision and risk in developing strategic technical solutions.
Azure Security Certifications are a plus

We value diversity and are an equal opportunity employer.  All qualified applicants will be considered for employment without regards to race, color, age, gender, sexual orientation, gender identity and expression, ethnicity or national origin, disability, pregnancy, religion, covered veteran status, protected genetic information, or any other characteristic protected by law. 

Please click here and here for more information.

Accommodation for Applicants with Disabilities:  As an equal opportunity employer, Acuity Inc. is committed to providing reasonable accommodations in its application process for qualified individuals with disabilities and disabled veterans. If you have difficulty using our online system due to a disability and need an accommodation, you may contact us at (770) 922-9000, select option 4.  Please clearly indicate what type of accommodation you are requesting and for what requisition. 

Any unsolicited resumes sent to Acuity Inc. from a third party, such as an Agency recruiter, including unsolicited resumes sent to an Acuity Inc. mailing address, fax machine or email address, directly to Acuity Inc. employees, or to Acuity Inc. resume database will be considered Acuity Inc. property. Acuity Inc. will NOT pay a fee for any placement resulting from the receipt of an unsolicited resume.

Acuity Inc. will consider any candidate for whom an Agency has submitted an unsolicited resume to have been referred by the Agency free of any charges or fees. This includes any Agency that is an approved/engaged vendor, but does not have the appropriate approvals to be engaged on a search.

E-Verify Participation Poster

e-verify.gov

eeoc.gov