Principal Security Architect

Insulet Corporation•San Diego, CA

5d•Hybrid

About The Position

The Principal Security Architect is a senior individual-contributor role in R&D Security responsible for defining and leading cybersecurity strategy for Insulet’s FDA-regulated connected insulin delivery platform. The platform includes an insulin pump, continuous glucose monitor (CGM) integrations, native iOS and Android patient-facing mobile apps that communicate with the pump over Bluetooth Low Energy (BLE), and cloud services that receive pump and CGM data. The role establishes the platform’s security vision, trust model, long-term direction, and engineering standards, with particular depth in PKI, identity, and cryptography. The architect remains hands-on with designs and critical implementations, mentors senior engineers, and applies corporate guidance and constraints from Product Security to the system’s software and hardware. The role also serves on the Security Council as the R&D security architect, providing recorded security positions for designs, early programs, and field issues. The architect partners with iOS, Android, firmware, cloud, quality, human factors, regulatory, and other colleagues to ensure security controls support a safe, reliable, and maintainable medical device. This is a hybrid role requiring 1–2 days per week in the office.

Requirements

Bachelor’s degree in computer science, Electrical Engineering, or Computer Engineering.
At least 10 years of professional experience, including substantial recent experience architecting security for production connected systems.
Demonstrated experience designing PKI and cryptographic key lifecycles, including issuance, storage, rotation, and revocation.
Experience with identity architecture spanning devices, users, and cloud services, including authentication and authorization.
Demonstrated Bluetooth Low Energy security experience, including pairing, bonding, and encrypted sessions between a mobile app and a constrained device.
Experience defining security architecture across embedded software, iOS and Android mobile apps, and a cloud backend.
Working knowledge of HIPAA and its application to the collection, storage, and transmission of protected health information.
Experience working within a regulated quality system, such as medical device, aerospace, or another design-control environment, including requirements traceability and verification.
Ability to write and defend architecture decisions that balance safety, security, reliability, and delivery speed.
Clear written and verbal communication with engineers and quality, regulatory, and clinical partners.

Nice To Haves

Experience with insulin delivery, CGM, or other Class II or Class III connected medical devices.
Working knowledge of IEC 62304, ISO 14971, FDA design controls, and FDA premarket cybersecurity guidance.
Applied cryptography experience, including protocol selection, certificate lifecycle operations, and review of key use in product code.
Experience with secure boot, signed firmware updates, and key storage on constrained or embedded devices.
Cloud security architecture experience covering service identity, secrets management, least privilege, logging, and monitoring for a device fleet.
Experience setting security requirements for third-party BLE sensors and partner cloud integrations.
Experience contributing cybersecurity content to regulatory submissions, threat models, or design history files.
Graduate degree in Computer Science, Electrical Engineering, or Computer Engineering, or a recognized security certification such as CISSP.
Experience mentoring senior engineers and setting security standards across teams as an individual contributor.

Responsibilities

Define and evolve security architecture across the pump, iOS and Android mobile apps, CGM integrations, and cloud services, including identity, key management, session security, secure updates, telemetry, and API boundaries.
Design and govern PKI, including certificate hierarchies, device and service identity, provisioning, rotation, revocation, and secure key storage across the pump, mobile apps, and cloud.
Set the cryptographic approach for therapy commands and health data, including authenticated sessions, protection in transit and at rest, signing, and key generation, storage, and retirement.
Own identity architecture for patients, mobile apps, pumps, and cloud services, including authentication, authorization, and least-privilege access to therapy and device data.
Lead BLE security design for mobile apps and the pump, including pairing, bonding, session encryption, device authentication, and trustworthy connections across reconnects; maintain consistency across iOS and Android.
Define security requirements for CGM and other partner integrations, including BLE sensor onboarding, authenticity of incoming data, and cloud-to-cloud trust.
Establish security and privacy controls for protected health information aligned with HIPAA, FDA cybersecurity expectations, and healthcare privacy obligations.
Drive threat modeling and security risk assessment early in design, and map controls to hazards, requirements, and residual risk in a regulated quality system.
Review architectures and critical implementations, and mentor senior engineers to ensure security intent is preserved in implementation.
Partner with Product Security to apply corporate guidance and constraints for identity, cryptography, vulnerability handling, logging, and supplier expectations; document gaps, limits, alternative controls, and their duration when constraints cannot be met.
Serve on the Security Council as the R&D security architect, presenting threat models and recommended application of Product Security constraints, identifying early-program decisions that will be costly to change, and determining scope, severity, action, and resolution criteria for field issues.
Partner with firmware, iOS, Android, cloud, quality, human factors, and regulatory teams on interface contracts, verification evidence, and submission-ready cybersecurity documentation.
Define how the system detects, responds to, and records vulnerabilities across the device fleet, mobile apps, and partner-connected paths.
Review security of shared non-UI logic where cross-platform code is used, while therapy user interfaces remain native to iOS or Android.