Enterprise Principal Security Architect

Elevance Health • Woburn, MA

1d • Hybrid

About The Position

Enterprise Security Architect Location: This role requires associates to be in-office 1 - 2 days per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace. Alternate locations may be considered if candidates reside within a commuting distance from an office. Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless an accommodation is granted as required by law. The Enterprise Security Architect is the enterprise's senior-most technical security architecture leader for modern platforms and emerging technology adoption. This role serves as a hands-on design authority and technical executive advisor - driving enterprise security architecture strategy, defining enforceable reference architectures and patterns, and governing secure implementation across Elevance Health's large-scale hybrid environments. The role leads the Enterprise Security Architecture (ESA) function and chairs the Security Architecture Review Board (SARB), partnering in lockstep with Enterprise Architecture to drive consistent, enforceable security-by-design decisions across the enterprise. This role operates at the intersection of enterprise strategy and deep engineering execution, providing decisive architectural direction for complex initiatives involving AI/ML (including GenAI/LLMs), Zero Trust, cloud platforms, cloud-native engineering (Kubernetes, containers, service mesh), identity, data protection, and secure SDLC/MDLC. The role is accountable for measurable outcomes: risk reduction, consistency of security-by-design, faster delivery through reusable patterns, and demonstrable compliance alignment.

Requirements

• Requires an BA/BS degree in Information Technology, Computer Science or related field of study and a minimum of 8 years experience in architecture/design in relevant technology disciplines; or any combination of education and experience, which would provide an equivalent background.

Nice To Haves

• Demonstrated experience securing AI/ML and GenAI/LLM systems in production, including threat modeling and control design aligned to NIST AI RMF preferred.
• Deep expertise implementing Zero Trust designs aligned to NIST SP 800-207 and mapped to maturity goals such as CISA ZTMM.
• Strong experience in at least one hyperscaler (AWS/Azure/GCP) and cloud-native platforms (Kubernetes, containers, service mesh, CI/CD).
• 2+ years architecting and deploying SASE/SSE at enterprise scale, including SWG, CASB, and ZTNA for tens of thousands of users across hybrid and cloud-first environments preferred.
• Hands-on architecture leadership with leading SSE/SASE platforms (e.g., Palo Alto Networks Prisma Access / Prisma SASE, Netskope, and/or comparable enterprise platforms), including global policy design, resiliency patterns, and phased migrations from legacy proxies/VPN.
• 3+ years leading an enterprise security architecture governance function and/or chairing an Architecture Review Board (SARB/ARB), including decision records and exception management.
• Demonstrated executive presence and ability to influence senior leaders; translates security architecture risk and tradeoffs into business impact, options, and investment recommendations.
• Experience operationalizing security architecture through repeatable review methods, measurable KPIs (e.g., time-to-decision, pattern adoption), and continuous improvement.
• Working knowledge of risk management and compliance expectations in regulated environments; produces audit-defensible architecture artifacts in partnership with audit, legal, and compliance stakeholders.
• CISSP (CISSP-ISSAP), CCSP, SABSA, TOGAF, CISM, CRISC (or equivalent EA/security architecture credentials) highly preferred.
• Prior experience leading enterprise security architecture in a Fortune 100 / Fortune 50 / Fortune 10 environment with complex hybrid infrastructure, regulated data and multiple business lines preferred.

Responsibilities

• Produce executive-ready, audit-defensible architecture documentation (standards, reference architectures, patterns, roadmaps, and decision records) that aligns with regulatory, audit, and enterprise architecture governance requirements.
• Own and evolve the enterprise security architecture vision for AI-enabled, cloud-first, Zero Trust-aligned platforms, including principles, standards, reference architectures, and reusable patterns.
• Define and drive Zero Trust architecture patterns aligned to NIST Zero Trust Architecture (SP 800-207) and CISA Zero Trust Maturity Model (identity, device, network/environment, application/workload, data, and visibility/analytics).
• Maintain, evolve, and expand enterprise AI security architecture and guardrails aligned to NIST AI RMF 1.0 and associated guidance for GenAI risk management profiles.
• Define and maintain secure-by-default cloud reference architectures across AWS/Azure and GCP.
• Partner in lockstep with Enterprise Architecture and OCISO stakeholders to operationalize governance through repeatable assessment methods, architecture reviews, and enforcement mechanisms, producing durable artifacts (reference architectures, patterns, standards, roadmaps, and decision records).
• Chair and operate the Security Architecture Review Board (SARB), defining intake, review criteria, decision records, and exception processes; ensure timely decisions and appropriate executive escalation.
• Develop and deliver concise, executive-ready briefings that translate security architecture tradeoffs into business impact, options, and recommendations for enterprise leadership.
• Recommends new technologies for domains based upon business value drivers and return on investment; drives new technologies towards implementation and exploitation.
• Establishes overall systems architecture vision and ensures specific components are appropriately designed and leveraged; contributes to the holistic vision of Enterprise Architecture.
• Takes responsibility for health of overall architecture for market segment.
• Maintains components of architecture strategy and vision.
• Maintains enterprise level blueprints.
• Coordinates all enterprise-level conceptual architecture components (e.g., data architecture, application architecture, technical architecture).
• Monitors usage of architectural components and assumes responsibility for reuse.
• Drives system migration based upon roadmaps defined in enterprise and domain blueprints.
• Leads architecture strategy and vision for enterprise.
• Ensures blueprints are refreshed as needs emerge or in accordance to plan of record changes.
• Provides continuous consulting services and direction in projects and architectures.
• Champions and responsible for enterprise level technology and architectural standards, guidelines, principles, frameworks, and reference models.
• Defines systems, technical, and application architectures for new strategic initiatives; develops and maintains an architectural blueprint and evolutionary roadmap that defines and communicates the strategic direction for these architectures in support of business and technical strategies; explains how the roadmap maintains and delivers cost effectiveness, business value, and competitiveness.

Benefits

• In addition to your salary, Elevance Health offers benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements).
• We offer a range of market-competitive total rewards that include merit increases, paid holidays, Paid Time Off, and incentive bonus programs (unless covered by a collective bargaining agreement), medical, dental, vision, short and long term disability benefits, 401(k) +match, stock purchase plan, life insurance, wellness programs and financial education resources, to name a few.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees