Lead, DevSecOps Application Architecture

Posted 1ds ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Lead DevSecOps architect securing Humana’s cloud-native application platforms and CI/CD pipelines. Guiding architecture strategy, application security, developer experience, and enterprise security automation.

Responsibilities:

  • Build overarching microservice architectures focused on DevSecOps integration
  • Own the technical direction, architecture strategy, and roadmap for enterprise DevSecOps application platforms
  • Focus on secure software engineering, application security posture, developer experience, and CI/CD security orchestration
  • Serve as a technical authority for the DevSecOps Engineering team
  • Partner with Enterprise Information Protection, architecture, engineering, platform, and application development stakeholders
  • Define security requirements and embed security controls into current and future application architectures
  • Design secure, scalable, cloud-native application platforms
  • Assist with security tooling selection, security testing, process automation, and configuration of Humana tools, applications, and systems
  • Lead architecture discussions and document technical decisions
  • Influence cross-functional stakeholders and make decisions on complex technical issues
  • Support platform modernization, technical debt reduction, legacy system deprecation, release gating, deployment controls, observability, developer platforms, and enterprise application security platforms

Requirements:

  • Bachelor's degree and 8+ years of technical experience, or equivalent experience
  • 4+ years of project leadership, architecture leadership, or technical leadership experience
  • Strong software engineering background with hands-on application development experience
  • Advanced proficiency with .NET / C# application development
  • Proficiency with Python for automation, scripting, or backend development
  • Experience designing and leading microservices-based architectures
  • Deep understanding of Microsoft Azure application services, including Azure App Services, Azure Functions, Azure Service Bus, or Azure storage and data services
  • Experience with API architecture, REST API design, and API gateway patterns, preferably including Apigee
  • Experience integrating security, quality, or compliance controls into CI/CD pipelines
  • On-call rotation availability
  • Hands-on experience with GitHub Actions and/or Azure DevOps
  • Experience with infrastructure as code, preferably Terraform
  • Strong knowledge of containerization and orchestration concepts, including Docker and Kubernetes
  • Experience with relational and NoSQL databases, preferably PostgreSQL and MongoDB
  • Understanding of application security principles, secure coding practices, and software supply chain security
  • Ability to lead architecture discussions, document technical decisions, and influence cross-functional stakeholders
  • Ability to work independently under minimal supervision and make decisions on complex technical issues
  • Home internet with at least 25 Mbps download and 10 Mbps upload
  • Dedicated work space without ongoing interruptions to protect member PHI/HIPAA information
  • Preferred experience with SAST, DAST, SCA, open-source dependency scanning, Checkmarx, AppScan, Cycode, SonarQube, SecAPI, JFrog Artifactory, Xray, HashiCorp Vault, LaunchDarkly, Databricks, Azure Data Lake Storage Gen2, Splunk, and Dynatrace
  • Preferred experience with platform modernization, technical debt reduction, legacy system deprecation, release gating, deployment controls, developer platforms, application security platforms, clean code practices, pull request standards, pipeline-as-code, and automated quality gates

Benefits:

  • Bonus incentive plan based upon company and/or individual performance
  • Medical benefits
  • Dental benefits
  • Vision benefits
  • 401(k) retirement savings plan
  • Paid time off
  • Company holidays
  • Personal holidays
  • Paid parental leave
  • Paid caregiver leave
  • Short-term disability
  • Long-term disability
  • Life insurance
  • Self-provided internet service for home or hybrid home/office employees
  • Remote work with occasional travel to Humana offices for training or meetings