Lead, DevSecOps Application Architecture

Humana • Louisville, KY

2d • Remote

About The Position

The Lead, DevSecOps Architecture builds overarching microservice architectures focused on DevSecOps integration. May assist with security tooling selection, security testing, process automation, and configuration of existing Humana tools, applications, and systems. The Lead, DevSecOps Architecture works on problems of diverse scope and complexity ranging from moderate to substantial. The Lead, DevSecOps Application Architecture is a senior technical leadership role within the DevSecOps & Engineering organization. This role owns the technical direction, architecture strategy, and roadmap for enterprise DevSecOps application platforms, with a primary focus on secure software engineering, application security posture, developer experience, and CI/CD security orchestration. The Lead, DevSecOps Application Architecture serves as a technical authority for the DevSecOps Engineering team and partners with Enterprise Information Protection, architecture, engineering, platform, and application development stakeholders to define security requirements and embed security controls into current and future application architectures. This role requires strong software engineering expertise, architecture leadership, and hands-on experience designing secure, scalable, cloud-native application platforms. The position is not a traditional infrastructure DevOps role; it is a technical leadership and application architecture role focused on secure software platforms, engineering enablement, pipeline integration, and enterprise security automation.

Requirements

• Bachelor's degree and 8+ years of technical experience, or equivalent experience.
• 4+ years of project leadership, architecture leadership, or technical leadership experience.
• Strong software engineering background with hands-on experience in application development.
• Advanced proficiency with .NET / C# application development.
• Proficiency with Python for automation, scripting, or backend development.
• Experience designing and leading microservices-based architectures.
• Deep understanding of Microsoft Azure application services, including one or more of the following: Azure App Services, Azure Functions, Azure Service Bus, Azure storage and data services.
• Experience with API architecture, REST API design, and API gateway patterns, preferably including Apigee.
• Experience integrating security, quality, or compliance controls into CI/CD pipelines.
• Hands-on experience with GitHub Actions and/or Azure DevOps.
• Experience with infrastructure as code, preferably Terraform.
• Strong knowledge of containerization and orchestration concepts, including Docker and Kubernetes.
• Experience working with relational and NoSQL databases, preferably PostgreSQL and MongoDB.
• Understanding of application security principles, secure coding practices, and software supply chain security.
• Ability to work independently under minimal supervision.

Nice To Haves

• Experience with application security testing tools and practices, including: SAST, DAST, SCA, Open-source dependency scanning.
• Experience with tools such as Checkmarx, AppScan, Cycode, SonarQube, SecAPI, JFrog Artifactory, or Xray.
• Experience with enterprise secrets and configuration management tools such as HashiCorp Vault and LaunchDarkly.
• Experience with data engineering or analytics platforms such as: Databricks, Azure Data Lake Storage Gen2, Enterprise data lake patterns.
• Experience leading platform modernization, technical debt reduction, or legacy system deprecation efforts.
• Experience designing release gating, deployment controls, or risk-based release readiness platforms.
• Experience with observability and monitoring platforms such as Splunk and Dynatrace.
• Experience supporting developer platforms, internal engineering tools, or enterprise application security platforms.
• Familiarity with developer experience principles and strategies to reduce developer overhead.
• Experience with clean code practices, pull request standards, pipeline-as-code, and automated quality gates.

Responsibilities

• Builds overarching microservice architectures focused on DevSecOps integration.
• Assists with security tooling selection, security testing, process automation, and configuration of existing Humana tools, applications, and systems.
• Owns the technical direction, architecture strategy, and roadmap for enterprise DevSecOps application platforms.
• Serves as a technical authority for the DevSecOps Engineering team.
• Partners with Enterprise Information Protection, architecture, engineering, platform, and application development stakeholders to define security requirements and embed security controls into current and future application architectures.
• Leads architecture discussions, documents technical decisions, and influences cross-functional stakeholders.
• Makes decisions on complex technical issues.
• Provides mentorship and technical coaching.
• Drives continuous improvement and modernization.

Benefits

• Medical, dental and vision benefits
• 401(k) retirement savings plan
• Time off (including paid time off, company and personal holidays, paid parental and caregiver leave)
• Short-term and long-term disability
• Life insurance
• Bonus incentive plan

What This Job Offers

• Job Type: Full-time
• Career Level: Senior