Your Role

As a Principal Cloud Security Architect you will be an integral member of the Information Security function, designing, building and supporting critical security capabilities in a hybrid multi-cloud environment embracing the DevOps and Agile mantra People > Process > Tools. This role will be responsible for product strategy, roadmap, tactical support of design, development, and implementation of cutting-edge sophisticated cloud security capabilities.

Your Work

In this role, you will:

• Develop and implement cloud security architecture strategies, standards, and practices to ensure the confidentiality, integrity, and availability of our cloud services.
• Design and review cloud infrastructure components, including networks, data storage, and access controls, to identify and mitigate security risks.
• Collaborate with development, operations, and compliance teams to integrate security controls into the software development lifecycle (SDLC) and automate security processes.
• Leverage automation tools and scripts to streamline security operations, including configuration management, incident response, and threat detection.
• Stay up-to-date on emerging security threats, vulnerabilities, and best practices in cloud security to proactively address potential risks.
• Provide technical guidance and mentorship to junior members of the security team and contribute to the development of their skills and knowledge.
• Be a catalyst to transform healthcare with business aligned agile, repeatable, and standardized security technology ready for new emerging threats
• Actively participate in a product team and work with business and engineering team to articulate security requirements in a way that leads to the secure creation and enhancement of the product
• Provide thought leadership and innovative methods to solving complex security challenges.
• Create and conduct automated cloud risk assessments utilizing standardized risk frameworks
• Collaborate with Security Operations Center team members to define and implement adequate and appropriate security log event management that is operationally excellent.
• Play a key role in the design, build and operationalizing security capabilities that enable the secure and compliant delivery of IT and business services in a hybrid multi-cloud environment.
• Collaborate with other IT and Information Security practitioners to assess current capabilities against cloud native capabilities. Benchmark and document the benefit and/or challenges associated with leveraging one over the other.
• Automate security processes and tooling to allow for rapid and secure cloud deployments.
• Establish and implement programmatic guardrails that ensure adequate and appropriate governance.
• Establish metrics and KPI's that measure the continued effectiveness and performance of security capabilities.
• Ensure security findings are natively and programmatically embedded into the IT and business delivery pipeline(s) so that security work is prioritized against other efforts.
• Document design decisions, flows, techniques, operational playbooks and other relevant items as needed to support easy and consistent consumption and support of security capabilities.
• Design and develop a security capabilities framework that allows for cloud services and technologies to natively consume.
• Influence and communicate effectively with technical and non-technical audiences, including senior product and business management.