Description

The Lead Cloud Security Architect will lead, consult and recommend solutions on matters relating to Cloud Security within Enterprise Information Security. This role will be responsible for the definition and design of the cloud security solutions and cloud-based architecture (Iaas/PaaS/SaaS). This is a role focused on designing, documenting, and developing security controls to support service enablement and security management for Humana’s growing utilization of cloud service provides (Amazon Web Services [AWS], Azure, and Google Cloud Platform [GCP]). The role requires a grasp of cloud security principles and practices, and a background working in an architecture or engineering role.

Responsibilities:

• Build a very close working relationship with DevOps, cloud platform engineering, application security, and enterprise security teams
• Determine security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments
• Maintain documentation related to Cloud Service Security including the development of security reference architectures, security control requirements, IAM recommendations, and security monitoring and response
• Participate in designing IT and Cloud security strategy, system security controls and secure configuration
• Create security policies and standards around Cloud Security, Container Security, Configuration Management, Infrastructure as Code, and Policy as Code
• Research new security technologies and their application to the corporate and cloud environment
• Ensure all acquired or developed systems are consistent with enterprise cloud security guidelines through solutions consulting
• Partner with Cloud Security Process Engineers to design and architect new security capabilities
• Partner with IT Infrastructure and Enterprise Architecture to deliver secure cloud services as part of service enablement process
• Continually review and assess changes to cloud services to track changes to risk and compliance position of individual cloud service offerings
• Assess new and existing cloud implementations, identifying security issues, misconfigurations and prioritizing fixes/remediation
• Defining and documenting how the implementation of a new system or interface impacts the security posture of the current environment
• Performing security reviews, identifying gaps in security architecture and design

Required Qualifications

• Bachelor’s Degree in Information Technology, Computer Science or a related field
• 8+ years of experience designing, developing, and consulting in a security context
• Strong experience with cloud provider ecosystems for at least one of the major cloud service providers (Amazon AWS, Microsoft Azure, Google Cloud Platform)
• Experience with risk-based testing and/or manual assessment of architecture and infrastructure configuration
• Experience with compiling security requirements, designing security controls, and security architecture

Preferred Qualifications

• Applied knowledge of healthcare industry
• Master’s Degree in Computer Science, Information Technology or a related field (or 8+ years experience in related technical competency in lieu  of degree)
• Advanced knowledge of security capabilities and constraints related to deploying cloud native and multi-cloud applications and infrastructure
• Experience in automation and agile software development processes
• Strong experience with cloud provider ecosystems for at more than one of the major cloud service providers (Amazon AWS, Microsoft Azure, Google Cloud Platform)

** Candidates that require Visa sponsor or transfer are required to work in a Humana office location and are not eligible for virtual office