Senior Cloud Security Architect

Humana•Louisville, KY

About The Position

The Senior Cloud Security Architect serves as the senior technical expert for enterprise endpoint security capabilities within the Countermeasures organization. The role evaluates, designs, and advances technologies that protect Windows and macOS workstations and servers through endpoint protection, detection and response, device security, and secure remote access capabilities. Working across Security Operations, Infrastructure, Identity, Cloud, Engineering, and Security Architecture, the position provides technical leadership, evaluates emerging technologies, and drives improvements to the organization’s endpoint security posture. The role provides expertise for endpoint security design, policies, standards, and technical requirements; leads technical work across endpoint protection and detection capabilities; and supports Zero Trust initiatives, including device trust, posture validation, conditional access, and secure remote access. It also contributes to security reviews, threat modeling, control assessments, governance, risk, and compliance activities, and leads proof-of-concept efforts and technology evaluations. The position is full-time, scheduled for 40 hours per week. The stated annual base-pay range is $117,600–$161,700, with eligibility for a bonus incentive plan. Humana offers benefits including medical, dental, and vision coverage; a 401(k) retirement savings plan; time off and holidays; paid parental and caregiver leave; short- and long-term disability; and life insurance.

Requirements

Bachelor’s degree in Information Security, Computer Science, Engineering, Information Technology, or a related field; equivalent experience may be considered.
At least 6 years in cybersecurity, endpoint security, infrastructure security, or a related technical discipline, including experience designing or supporting enterprise endpoint security capabilities.
At least 2 years in security architecture, security engineering, or technical design leadership.
Strong AI fluency and ability to identify, prioritize, and drive AI-related opportunities that deliver measurable value for engineering, security, or developer experience teams.
Experience securing Windows workstations, Windows servers, and macOS environments.
Experience with endpoint protection capabilities, including EDR and/or XDR.
Working knowledge of endpoint management, MDM, and MAM capabilities and their integration with endpoint security controls.
Experience supporting Zero Trust initiatives, including device trust, security posture validation, conditional access, and adaptive access controls.
Experience with ZTNA and modern secure remote access technologies.
Experience evaluating security technologies and developing technical recommendations.
Knowledge of endpoint attack techniques, threat detection, incident response, and security monitoring practices.
Ability to lead technical discussions and communicate effectively with technical and business stakeholders.

Nice To Haves

Experience integrating endpoint security telemetry with security monitoring, analytics, orchestration, or incident response platforms.
Experience supporting cloud-hosted and hybrid environments.
Experience with technology evaluations, proof-of-concept efforts, and security capability assessments.
Familiarity with industry security frameworks and Zero Trust principles.
CISSP, CCSP, or equivalent industry certification.

Responsibilities

Serve as the subject matter expert for enterprise endpoint security capabilities.
Design and evaluate solutions supporting Windows and macOS endpoint security.
Provide technical guidance for projects and initiatives that affect endpoint security technologies.
Partner with engineering and operational teams to improve endpoint security effectiveness and resilience.
Provide endpoint security expertise for the development, maintenance, and periodic review of endpoint security policies, standards, and technical requirements.
Provide technical leadership across EDR, XDR, endpoint hardening, threat prevention, device control, and privileged access controls.
Recommend improvements to endpoint prevention, detection, investigation, containment, and response capabilities.
Collaborate with Security Operations to improve endpoint visibility and threat detection outcomes.
Support Zero Trust initiatives through endpoint trust and device security controls.
Provide technical guidance for ZTNA, secure remote access, and device posture validation capabilities.
Partner with Identity and Access Management teams on conditional access and adaptive access controls.
Participate in security reviews, threat modeling, and control assessments for endpoint security technologies.
Identify security gaps and recommend mitigation strategies.
Contribute endpoint security expertise to governance, risk, and compliance activities.
Lead proof-of-concept efforts and technical evaluations, and recommend technologies for adoption and optimization.
Identify, prioritize, and drive AI-related opportunities that deliver measurable value for engineering, security, or developer experience teams.
Balance security, operational, and business requirements when guiding decisions.
Collaborate across security, infrastructure, cloud, engineering, identity, and architecture teams.
Influence technical direction and drive continuous improvement without direct authority.
Advance the organization’s ability to prevent, detect, investigate, and respond to endpoint threats.