Principal Security Architect

Insulet Corporation•San Diego, CA

7d•$196,500 - $294,750•Hybrid

About The Position

The Principal Security Architect is a senior individual contributor in R&D Security who defines and leads cybersecurity strategy for Insulet’s FDA-regulated connected insulin delivery platform. The platform includes an insulin pump, continuous glucose monitor (CGM) integrations, native iOS and Android patient-facing mobile applications that communicate with the pump over Bluetooth Low Energy (BLE), and cloud services that receive pump and CGM data. The role establishes the trust model across these components, with particular depth in public key infrastructure (PKI), identity, and cryptography. The architect sets long-term security direction and the standards product engineers follow, mentors senior engineers, and remains involved in architecture decisions and critical implementations. The role applies Product Security’s corporate guidance and constraints to the system and serves on the Security Council as the R&D security architect. It partners with firmware, iOS, Android, cloud, quality, human factors, and regulatory teams to ensure security controls support a safe, reliable, maintainable medical device and to develop verification evidence and submission-ready cybersecurity documentation. This is a hybrid role requiring 1–2 days per week in the office.

Requirements

Bachelor’s degree in computer science, electrical engineering, or computer engineering.
At least 10 years of professional experience, including substantial recent work architecting security for production connected systems.
Demonstrated experience designing PKI and cryptographic key lifecycles, including issuance, storage, rotation, and revocation.
Experience with identity architecture spanning devices, users, and cloud services, including authentication and authorization.
Demonstrated Bluetooth Low Energy security experience, including pairing, bonding, and encrypted sessions between a mobile app and a constrained device.
Experience defining security architecture across embedded software, iOS and Android mobile apps, and a cloud backend.
Working knowledge of HIPAA and its application to collecting, storing, and transmitting protected health information.
Experience working in a regulated quality system, such as medical device, aerospace, or another design-control environment, including requirements traceability and verification.
Ability to write and defend architecture decisions that balance safety, security, reliability, and delivery speed.
Clear written and verbal communication with engineers and quality, regulatory, and clinical partners.

Nice To Haves

Experience with insulin delivery, CGM, or other Class II or Class III connected medical devices.
Working knowledge of IEC 62304, ISO 14971, FDA design controls, and FDA premarket cybersecurity guidance.
Applied cryptography experience, including protocol selection, certificate lifecycle operations, and review of how keys are used in product code.
Experience with secure boot, signed firmware updates, and key storage on constrained or embedded devices.
Cloud security architecture experience involving service identity, secrets management, least privilege, logging, and monitoring for a device fleet.
Experience setting security requirements for third-party BLE sensors and partner cloud integrations.
Experience contributing cybersecurity content to regulatory submissions, threat models, or design history files.
A graduate degree in computer science, electrical engineering, or computer engineering, or a recognized security certification such as CISSP.
Experience mentoring senior engineers and setting security standards across teams as an individual contributor.

Responsibilities

Define and evolve security architecture across the pump, iOS and Android mobile apps, CGM integrations, and cloud, including identity, key management, session security, secure updates, telemetry, and API boundaries.
Design and govern PKI, including certificate hierarchies, device and service identity, provisioning, rotation, revocation, and secure key storage across the pump, mobile apps, and cloud.
Set the cryptographic approach for therapy commands and health data, including authenticated sessions, protection in transit and at rest, signing, and key generation, storage, and retirement.
Own identity architecture for patients, mobile apps, pumps, and cloud services, including authentication, authorization, and least-privilege access to therapy and device data.
Lead BLE security design for the mobile apps, including pairing, bonding, session encryption, device authentication, and trustworthy connections across reconnects, with a consistent model for iOS and Android.
Define security requirements for CGM and other partner integrations, including BLE sensor onboarding, authenticity of incoming data, and cloud-to-cloud trust.
Establish security and privacy controls for protected health information in line with HIPAA, FDA cybersecurity expectations, and healthcare privacy obligations.
Drive threat modeling and security risk assessment early in design, mapping controls to hazards, requirements, and residual risk in a regulated quality system.
Review architectures and critical implementations, and mentor senior engineers so security intent is carried through implementation.
Partner with Product Security to apply corporate guidance and constraints concerning identity, cryptography, vulnerability handling, logging, and supplier expectations; document specific gaps, limits, alternative controls, and duration when a constraint cannot be met.
Serve on the Security Council as the R&D security architect, bringing threat models and recommendations for applying Product Security constraints, identifying early-program decisions that will be expensive to change, and determining appropriate field-issue scope, severity, action, and resolution criteria.
Partner with firmware, iOS, Android, cloud, quality, human factors, and regulatory teams on interface contracts, verification evidence, and submission-ready cybersecurity documentation.
Define how the system detects, responds to, and records vulnerabilities across the device fleet, mobile apps, and partner-connected paths.
Review the security of shared non-UI logic where cross-platform code is used, while therapy user interfaces remain native to iOS or Android.