Principal Cloud Security Architect

Elevance Health•Indianapolis, IN

1d•Hybrid

About The Position

The Principal Cloud Security Architect works with business and technology stakeholders to develop and deliver end-to-end application technology products and services for enterprise-wide technology platforms aligned with organizational strategy. The role combines deep cloud-platform expertise and advanced cloud security knowledge, advising senior leadership, mentoring cloud engineering teams, and promoting a security-first culture. The position leads secure, scalable, and resilient cloud architecture across AWS, Azure, and/or GCP; defines enterprise cloud security policies, standards, reference architectures, and engineering guardrails; and advances governance and compliance automation. It also provides architectural consulting and direction on projects, oversees technical specifications and design reviews, and assesses the compatibility and integration of technology solutions. This is a hybrid role requiring associates to work in-office one to two days per week. Candidates must be within reasonable commuting distance of a posting location unless an accommodation is granted as required by law. The role is not eligible for current or future visa sponsorship.

Requirements

BA/BS degree in Information Technology, Computer Science, or a related field, and a minimum of 11 years of experience; alternatively, multidimensional platform experience with business and technical applications, or an equivalent combination of education and experience.
Strong expertise in cloud security, including IAM, encryption, network security, and workload protection.
Hands-on experience with infrastructure-as-code and automation tools.
Deep understanding of networking concepts, including VPCs, subnets, firewalls, and zero trust.
Hands-on experience implementing DevSecOps and secure CI/CD pipelines.
Experience working in regulated environments, preferably healthcare.
Strong knowledge of compliance frameworks such as HIPAA, HITRUST, NIST, and SOC 2.
Strong knowledge and expertise in cloud control policies and frameworks.
Experience working with executives and their teams in a matrixed environment to deliver value and drive change.
Cross-functional experience, such as strategy, change management, or business process management.
Strong background in application security and secure coding practices.

Nice To Haves

Hands-on experience with AI tooling, including IDEs and services.
Industry certifications such as AWS Solutions Architect, AWS Security Specialty, Azure Security Engineer, or CISSP.
Experience with containerization and orchestration, including Docker and Kubernetes.
Experience with cloud security tools such as CSPM, CWPP, SIEM, and secrets management platforms.
Experience in large-scale enterprise healthcare environments.

Responsibilities

Author and evangelize cloud security whitepapers and position papers in partnership with OCISO and Enterprise Architecture.
Lead the design of secure, scalable, and resilient cloud architectures across AWS, Azure, and/or GCP.
Define enterprise cloud security policies, standards, reference architectures, and engineering guardrails aligned with company policies.
Design compliance automation for healthcare regulations and frameworks, including HIPAA, HITRUST, NIST, and ISO.
Design automated security patterns for IAM, encryption, network security, and zero trust architecture.
Lead threat modeling, risk assessments, and remediation strategies for cloud-based systems.
Champion DevSecOps practices, including automated security testing, policy-as-code, and secure CI/CD pipelines.
Partner with enterprise architecture, application teams, and security organizations to embed security into the cloud SDLC.
Advise leadership on cloud risk, strategy, and emerging technologies.
Partner with leadership to design processes that shape the foundation for emerging cloud technologies.
Lead initiatives related to cloud governance.
Recommend technology solutions and products that align with enterprise strategic objectives.
Oversee development and delivery of technical and/or functional specifications.
Oversee technical design reviews and testing to ensure application technologies and solutions meet business requirements.
Assess the compatibility and integration of solutions and products.
Provide continuous consulting services and direction on projects.
Champion architectural standards, guidelines, principles, frameworks, and reference models.