Principal Security Domain Architect

Independence Pet Group • Chicago, IL

1d

About The Position

Independence Pet Holdings is a corporate holding company established in 2021 that manages a portfolio of pet health brands and services throughout North America. The company operates across pet insurance, education, lost recovery services, and related offerings, with a multi-brand, omnichannel approach.

In close collaboration with the CISO team, the Principal Security Domain Architect defines and governs enterprise security architecture, embedding security across platforms, applications, and processes. The role enables secure adoption of cloud-native services, AI-driven automation, and Zero Trust principles while supporting compliance with global regulatory frameworks. The environment is Microsoft- and Azure-centric and focused on insurance.

The role spans enterprise security architecture, identity and access management, compliance and risk, cloud and application security, AI/ML governance, strategic architecture planning, and incident-response support. It also supports the CISO in developing the future-state security roadmap, retaining Tier-2 SOC capabilities in-house, and advancing security automation and AI-driven threat detection.

The Chicago base salary range is $205,805–$267,545 per year. The position is eligible for an annual bonus. Placement within the range depends on job-related factors such as experience, skills, and certifications. The total rewards package includes healthcare, parental leave, and career advancement opportunities; some offerings depend on work location.

Requirements

• 10+ years of experience as a security architect.
• Strong knowledge of cloud-native security patterns and compliance frameworks.
• Experience or familiarity with securing AI/ML and agentic workflows.

Nice To Haves

• Insurance industry experience.

Responsibilities

• Define and maintain enterprise security architecture standards for a Microsoft- and Azure-centric insurance environment.
• Architect and govern Zero Trust across landing zones, including unified Conditional Access and identity governance for internal and external users.
• Publish reusable security patterns for multi-tenant and cross-brand scenarios.
• Oversee security for AKS, API management, and cloud-native infrastructure.
• Ensure architecture reviews and compliance align with the Calandra Toolkit and Skylark Security Stack.
• Drive the CIAM strategy, including the choice between Ping and Microsoft Entra External ID, and support unified identity governance across brands.
• Implement adaptive MFA that reduces friction and cost while mitigating VOIP-based fraud.
• Integrate IAM for internal users.
• Architect and develop a security controls catalog mapped to PCI-DSS, SOC 2, HIPAA, GDPR/CCPA, NAIC, and Quebec Law 25.
• Support audits through evidence collection, control mapping, documentation, and security-posture improvement.
• Embed KYC, AML, and ABC checks into Skylark workflows and automate OFAC, UK, and EU watchlist checks.
• Define secure patterns for APIs, microservices, and integration pipelines.
• Implement container security, workload isolation, and encryption standards.
• Drive DevSecOps adoption, including SAST, DAST, secrets, and IaC, and govern GitHub Advanced Security and Azure DevOps integrations.
• Architect security for Azure AI/ML platforms, including Azure OpenAI, Copilot Studio, and Databricks.
• Lead Responsible AI security governance aligned with the NIST AI RMF.
• Secure agentic workflows and generative AI integrations.
• Support the CISO in developing a future-state security architecture roadmap aligned with digital transformation goals.
• Retain Tier-2 SOC capabilities in-house to support compliance with NYDFS, PCI DSS, and ISO 27001.
• Champion security automation and AI-driven threat detection.

Benefits

• Annual bonus eligibility.
• Comprehensive full medical, dental, and vision insurance.
• Basic life insurance at no cost to the employee.
• Company-paid short-term and long-term disability.
• 12 weeks of 100% paid parental leave.
• Health Savings Account (HSA).
• Flexible Spending Accounts (FSA).
• Retirement savings plan.
• Personal paid time off.
• Paid holidays and a company-wide Wellness Day off.
• Paid time off to volunteer at nonprofit organizations.
• Pet-friendly office environment.
• Commuter benefits.
• Group pet insurance.
• On-the-job training and skills development.
• Employee Assistance Program (EAP).
• Healthcare and opportunities for career advancement.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Education Level: No Education Listed