Principal Security Domain Architect
About The Position
Independence Pet Holdings, established in 2021, is a corporate holding company managing a portfolio of pet health brands and services throughout North America. The company offers solutions spanning insurance, pet education, lost recovery services, and related areas, with a focus on simplifying the pet-parenting journey and improving pets’ well-being. The Principal Security Domain Architect will work closely with the CISO team to define and govern enterprise security architecture for Doubtless (formerly Independence Pet Holdings). The role embeds security across platforms, applications, and processes, and enables secure adoption of cloud-native services, AI-driven automation, and zero-trust principles while supporting compliance with global regulatory frameworks. The environment is Microsoft-based and Azure-centric, with an insurance-industry focus. The role covers enterprise security architecture, identity and access management, compliance and risk management, cloud and application security, AI/ML and Responsible AI governance, strategic leadership, and incident response. It uses Azure security and AI services, Sentinel, Ping Identity, Azure DevOps, GitHub Advanced Security, and the Calandra Toolkit and Skylark Security Stack. The role also supports the CISO in developing a future-state security roadmap and retaining Tier-2 SOC capabilities in-house.
Requirements
- 10+ years of experience as a security architect.
- Strong knowledge of cloud-native security patterns and compliance frameworks.
- Experience or familiarity with securing AI/ML and agentic workflows.
Nice To Haves
- Insurance industry experience.
Responsibilities
- Define and maintain enterprise security architecture standards, including for an Azure-centric Microsoft environment.
- Architect and govern Zero Trust across landing zones, including unified Conditional Access and identity governance for internal and external users.
- Publish reusable security patterns for multi-tenant and cross-brand scenarios.
- Oversee security for AKS, API management, and cloud-native infrastructure.
- Ensure architecture reviews and compliance align with the Calandra Toolkit and Skylark Security Stack.
- Drive CIAM strategy, including assessment of Ping versus Microsoft Entra External ID, and support unified identity governance across brands.
- Implement adaptive MFA to reduce friction and cost while mitigating VOIP-based fraud.
- Integrate IAM for all internal users.
- Architect and develop a security controls catalog mapped to PCI-DSS, SOC 2, HIPAA, GDPR/CCPA, NAIC, and Quebec Law 25.
- Support audits through evidence collection, control mapping, documentation, and security-posture improvement.
- Embed KYC, AML, and ABC checks into Skylark workflows and automate OFAC, UK, and EU watchlist checks.
- Define secure patterns for APIs, microservices, and integration pipelines.
- Implement container security, workload isolation, and encryption standards.
- Drive DevSecOps adoption, including SAST, DAST, secrets management, and IaC; govern GitHub Advanced Security and Azure DevOps integrations.
- Architect security for Azure AI/ML platforms, including Azure OpenAI, Copilot Studio, and Databricks.
- Lead Responsible AI security governance aligned to the NIST AI RMF.
- Secure agentic workflows and generative AI integrations.
- Support the CISO in developing a future-state security architecture roadmap aligned with digital transformation goals.
- Retain Tier-2 SOC capabilities in-house to support compliance with NYDFS, PCI DSS, and ISO 27001.
- Champion security automation and AI-driven threat detection.
Benefits
- Comprehensive medical, dental, and vision insurance.
- Basic life insurance at no cost to the employee.
- Company-paid short-term and long-term disability.
- 12 weeks of 100% paid parental leave.
- Health Savings Account (HSA).
- Flexible Spending Accounts (FSA).
- Retirement savings plan.
- Personal paid time off.
- Paid holidays and a company-wide Wellness Day off.
- Paid time off to volunteer at nonprofit organizations.
- Pet-friendly office environment.
- Commuter benefits.
- Group pet insurance.
- On-the-job training and skills development.
- Employee Assistance Program (EAP).
- Annual bonus eligibility.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
Education Level
No Education Listed
