Information Security Architect at US Anesthesia Partners

Job description

US Anesthesia Partners is the highest-quality single-specialty anesthesia practice in the United States, with over 6,000 employees distributed across 10 states. Our clinical and non-clinical staff support each other as they work toward a common vision: Forging a better future by empowering people to advance exceptional care. POSITION SUMMARY: The Information Security Architect is a functional, hands-on architect whose responsibility is to lead the governance and maturation of secure design, implementation and management for Enterprise applications and systems across all IT domains. This role partners closely with developers, DevOps, cloud infrastructure, networking, solution architects and security teams to embed security throughout the software development lifecycle (SDLC) while enabling rapid delivery of cloud-based solutions. The ideal candidate has deep expertise in cloud security architecture, application security, DevSecOps, threat modeling, and modern cloud platforms such as AWS and Azure. This role also requires extensive knowledge and understanding of platform architecture, software development, well architected frameworks, and the ability to solve complex technical challenges. The Information Security Architect will serve as a trusted advisor to development teams, helping design resilient, scalable, and secure applications that meet business and regulatory requirements. ESSENTIAL DUTIES AND RESPONSIBILITIES : ( The ideal candidate must be able to complete all physical requirements of the job with or without a reasonable accommodation) Pineapple • Establish es and enforce s secure software development standards and cloud security best practices. • Lead s the security lifecycle by reviewing emerging technologies, threats , and trends as well as maturing end of life governance for applications and technologies. • Participate s in and mature s the Architectural Review Board by applying a security focused mindset to all IT domains being reviewed. • Review s application architecture documentation including diagrams and runbooks with a security focused lens. • Partner s with engineering and DevOps teams to create security governance and best practice into CI/CD pipelines. • Conduct s architecture risk assessments, threat modeling, and secure design reviews for new and existing applications. • Develop s security reference architectures, design patterns, and technical standards for cloud-native applications. • Lead s application security initiatives including SAST, DAST, s oftware c omposition a nalysis (SCA), Infrastructure as Code (IaC) scanning, container security, and API security. • Work s directly with the e nterprise a rchitect to ensure that overall enterprise security architecture, governance , and guidance is being executed on all IT domain levels. • Evaluate s cloud services and third-party technologies for security risks and compliance requirements. • Collaborate s with s ecurity o perations, i nfrastructure, c ompliance, and e ngineering teams to investigate and resolve security findings. • Acts as a trusted advisor to development, infrastructure, network, cloud, data, and security teams. • Ensure s cloud applications comply with organizational policies and applicable regulatory frameworks such as PCI DSS, HIPAA, SOC 2, ISO 27001, NIST, and GDPR. • Provide s technical leadership and mentorship to development teams on secure coding practices and cloud security. • Performs other duties as assigned by management. K NOWLEDGE/SKILLS/ABILITIES (KSAs): • Bachelor’s degree in computer science, business, or a related field required ( or equivalent work experience ) . • 7+ years of experience securing enterprise environments across on-premises, hybrid, and cloud infrastructures. • Strong understanding of secure software development lifecycle (SSDLC) and DevSecOps practices. • Strong knowledge of secure coding principles and common application vulnerabilities (OWASP Top 10, API Security Top 10). • Solid knowledge and experience working with Azure Dev Ops technology with focus on CI/CD pipelines and GIT repositories. • Strong knowledge of identity and access management, authentication, authorization, OAuth, OpenID Connect, SAML, risk management , and Zero Trust principles. • Strong familiarity with SIEM, EDR/XDR, IAM, PAM, CASB, DLP, and vulnerability management platforms. • Experience in healthcare is preferred. • CISSP certification is preferred. • Ability to understand and translate business needs , aligning them to proper technical application solutions. • Ability to translate security policy, regulatory requirements, and risk findings into practical architecture guidance. • Excellent communication and collaboration skills with the ability to work with multiple teams simultaneously . • Excellent time management skills and ability to work on multiple business critical projects simultaneously. • Understanding of core security and compliance principles in a healthcare environment. • Strong analytical and problem-solving skills with the ability to solve complex technical problems.

Requirements

Must-haves

ESSENTIAL DUTIES AND RESPONSIBILITIES : ( The ideal candidate must be able to complete all physical requirements of the job with or without a reasonable accommodation) Pineapple
Establish es and enforce s secure software development standards and cloud security best practices.
Lead s the security lifecycle by reviewing emerging technologies, threats , and trends as well as maturing end of life governance for applications and technologies.
Participate s in and mature s the Architectural Review Board by applying a security focused mindset to all IT domains being reviewed.
Review s application architecture documentation including diagrams and runbooks with a security focused lens.
Partner s with engineering and DevOps teams to create security governance and best practice into CI/CD pipelines.
Conduct s architecture risk assessments, threat modeling, and secure design reviews for new and existing applications.
Develop s security reference architectures, design patterns, and technical standards for cloud-native applications.
Lead s application security initiatives including SAST, DAST, s oftware c omposition a nalysis (SCA), Infrastructure as Code (IaC) scanning, container security, and API security.
Work s directly with the e nterprise a rchitect to ensure that overall enterprise security architecture, governance , and guidance is being executed on all IT domain levels.
Evaluate s cloud services and third-party technologies for security risks and compliance requirements.
Collaborate s with s ecurity o perations, i nfrastructure, c ompliance, and e ngineering teams to investigate and resolve security findings.
Acts as a trusted advisor to development, infrastructure, network, cloud, data, and security teams.
Ensure s cloud applications comply with organizational policies and applicable regulatory frameworks such as PCI DSS, HIPAA, SOC 2, ISO 27001, NIST, and GDPR.
Provide s technical leadership and mentorship to development teams on secure coding practices and cloud security.
Performs other duties as assigned by management.
Bachelor’s degree in computer science, business, or a related field required ( or equivalent work experience ) .
7+ years of experience securing enterprise environments across on-premises, hybrid, and cloud infrastructures.
Strong understanding of secure software development lifecycle (SSDLC) and DevSecOps practices.
Strong knowledge of secure coding principles and common application vulnerabilities (OWASP Top 10, API Security Top 10).
Solid knowledge and experience working with Azure Dev Ops technology with focus on CI/CD pipelines and GIT repositories.
Strong knowledge of identity and access management, authentication, authorization, OAuth, OpenID Connect, SAML, risk management , and Zero Trust principles.

Nice-to-haves

Experience in healthcare is preferred.
CISSP certification is preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazureci/cdapi

Platform: icims
Effort: medium

Benefits

Benefits detected in the listing.

Vision