Lead, DevSecOps Application Architecture
About The Position
The Lead, DevSecOps Architecture builds overarching microservice architectures focused on DevSecOps integration. May assist with security tooling selection, security testing, process automation, and configuration of existing Humana tools, applications, and systems. The Lead, DevSecOps Architecture works on problems of diverse scope and complexity ranging from moderate to substantial. The Lead, DevSecOps Application Architecture is a senior technical leadership role within the DevSecOps & Engineering organization. This role owns the technical direction, architecture strategy, and roadmap for enterprise DevSecOps application platforms, with a primary focus on secure software engineering, application security posture, developer experience, and CI/CD security orchestration. The Lead, DevSecOps Application Architecture serves as a technical authority for the DevSecOps Engineering team and partners with Enterprise Information Protection, architecture, engineering, platform, and application development stakeholders to define security requirements and embed security controls into current and future application architectures. This role requires strong software engineering expertise, architecture leadership, and hands-on experience designing secure, scalable, cloud-native application platforms. The position is not a traditional infrastructure DevOps role; it is a technical leadership and application architecture role focused on secure software platforms, engineering enablement, pipeline integration, and enterprise security automation.
Requirements
- Bachelor's degree and 8+ years of technical experience, or equivalent experience.
- 4+ years of project leadership, architecture leadership, or technical leadership experience.
- Strong software engineering background with hands-on experience in application development.
- Advanced proficiency with .NET / C# application development.
- Proficiency with Python for automation, scripting, or backend development.
- Experience designing and leading microservices-based architectures.
- Deep understanding of Microsoft Azure application services, including one or more of the following: Azure App Services, Azure Functions, Azure Service Bus, Azure storage and data services.
- Experience with API architecture, REST API design, and API gateway patterns, preferably including Apigee.
- Experience integrating security, quality, or compliance controls into CI/CD pipelines.
- Hands-on experience with GitHub Actions and/or Azure DevOps.
- Experience with infrastructure as code, preferably Terraform.
- Strong knowledge of containerization and orchestration concepts, including Docker and Kubernetes.
- Experience working with relational and NoSQL databases, preferably PostgreSQL and MongoDB.
- Understanding of application security principles, secure coding practices, and software supply chain security.
- Ability to lead architecture discussions, document technical decisions, and influence cross-functional stakeholders.
- Ability to work independently under minimal supervision and make decisions on complex technical issues.
- Technical ownership and accountability
- Architecture strategy and roadmap development
- Executive communication and advisory capability
- Independent judgment and complex decision-making
- Cross-functional influence and stakeholder management
- Secure-by-design mindset
- Developer experience focus
- Ability to balance security, delivery speed, reliability, and enterprise risk
- Mentorship and technical coaching
- Continuous improvement and modernization mindset
Nice To Haves
- Experience with application security testing tools and practices, including SAST, DAST, SCA, Open-source dependency scanning.
- Experience with tools such as Checkmarx, AppScan, Cycode, SonarQube, SecAPI, JFrog Artifactory, or Xray.
- Experience with enterprise secrets and configuration management tools such as HashiCorp Vault and LaunchDarkly.
- Experience with data engineering or analytics platforms such as Databricks, Azure Data Lake Storage Gen2, Enterprise data lake patterns.
- Experience designing release gating, deployment controls, or risk-based release readiness platforms.
- Experience with observability and monitoring platforms such as Splunk and Dynatrace.
- Familiarity with developer experience principles and strategies to reduce developer overhead.
- Experience with clean code practices, pull request standards, pipeline-as-code, and automated quality gates.
Responsibilities
- Builds overarching microservice architectures focused on DevSecOps integration.
- Assists with security tooling selection, security testing, process automation, and configuration of existing Humana tools, applications, and systems.
- Owns the technical direction, architecture strategy, and roadmap for enterprise DevSecOps application platforms.
- Focuses on secure software engineering, application security posture, developer experience, and CI/CD security orchestration.
- Serves as a technical authority for the DevSecOps Engineering team.
- Partners with Enterprise Information Protection, architecture, engineering, platform, and application development stakeholders to define security requirements and embed security controls into current and future application architectures.
- Designs secure, scalable, cloud-native application platforms.
- Focuses on secure software platforms, engineering enablement, pipeline integration, and enterprise security automation.
- Leads architecture discussions.
- Documents technical decisions.
- Influences cross-functional stakeholders.
- Works independently under minimal supervision and makes decisions on complex technical issues.
- Leads platform modernization, technical debt reduction, or legacy system deprecation efforts.
- Designs release gating, deployment controls, or risk-based release readiness platforms.
- Supports developer platforms, internal engineering tools, or enterprise application security platforms.
Benefits
- medical
- dental
- vision
- 401(k) retirement savings plan
- time off (including paid time off, company and personal holidays, paid parental and caregiver leave)
- short-term and long-term disability
- life insurance
- bonus incentive plan
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
