Senior Cloud Security Architect

Humana•Louisville, KY

4d•$117,600 - $161,700

About The Position

The Senior Cloud Security Architect serves as the senior technical expert for enterprise endpoint security capabilities within the Countermeasures organization. The role evaluates, designs, and advances technologies that protect Windows and macOS workstations and servers through endpoint protection, detection and response, device security, and secure remote access capabilities. Working across Security Operations, Infrastructure, Identity, Cloud, Engineering, and Security Architecture teams, the position provides technical leadership, evaluates emerging technologies, and drives improvements to the organization’s endpoint security posture. The role also contributes endpoint security expertise to risk, governance, and compliance activities, leads proof-of-concept efforts, and recommends technologies for adoption and optimization. The position is full time at 40 scheduled hours per week. The posted annual base pay range is $117,600–$161,700, with eligibility for a bonus incentive plan based on company and/or individual performance.

Requirements

Bachelor’s degree in Information Security, Computer Science, Engineering, Information Technology, or a related field; equivalent experience may be considered.
6+ years in cybersecurity, endpoint security, infrastructure security, or a related technical discipline, including experience designing or supporting enterprise endpoint security capabilities.
2+ years in security architecture, security engineering, or technical design leadership.
Strong AI fluency, including the ability to identify, prioritize, and drive AI-related opportunities that deliver measurable value for engineering, security, or developer experience teams.
Experience securing Windows workstations, Windows servers, and macOS environments.
Experience with endpoint protection capabilities, including EDR and/or XDR.
Working knowledge of endpoint management, MDM, and MAM capabilities and their integration with endpoint security controls.
Experience supporting Zero Trust initiatives, including device trust, security posture validation, conditional access, and adaptive access controls.
Experience with ZTNA and modern secure remote access technologies.
Experience evaluating security technologies and developing technical recommendations.
Knowledge of endpoint attack techniques, threat detection, incident response, and security monitoring practices.
Ability to lead technical discussions and communicate effectively with technical and business stakeholders.

Nice To Haves

Experience integrating endpoint security telemetry with security monitoring, analytics, orchestration, or incident response platforms.
Experience supporting cloud-hosted and hybrid environments.
Experience with technology evaluations, proof-of-concept efforts, and security capability assessments.
Familiarity with industry security frameworks and Zero Trust principles.
CISSP, CCSP, or equivalent industry certification.

Responsibilities

Serve as the subject matter expert for enterprise endpoint security capabilities and for the development, maintenance, and periodic review of endpoint security policies, standards, and technical requirements.
Design and evaluate solutions supporting Windows and macOS endpoint security.
Provide technical guidance for projects and initiatives that affect endpoint security technologies.
Partner with engineering and operational teams to improve endpoint security effectiveness and resilience.
Provide technical leadership across EDR, XDR, endpoint hardening, threat prevention, device control, and privileged access controls.
Recommend improvements to prevention, detection, investigation, containment, and response capabilities.
Collaborate with Security Operations to improve endpoint visibility and threat detection outcomes.
Support Zero Trust initiatives through endpoint trust and device security controls.
Provide technical guidance for ZTNA, secure remote access, and device posture validation capabilities.
Partner with Identity and Access Management teams on conditional access and adaptive access controls.
Participate in security reviews, threat modeling, and control assessments related to endpoint security technologies.
Identify security gaps and recommend mitigation strategies.
Contribute endpoint security expertise to governance, risk, and compliance activities.
Lead proof-of-concept efforts and technical evaluations, and recommend technologies for adoption and optimization.
Balance security, operational, and business requirements when guiding decisions.
Collaborate across security, infrastructure, cloud, engineering, identity, and architecture teams; influence technical direction and drive continuous improvement without direct authority.
Advance the organization’s ability to prevent, detect, investigate, and respond to endpoint threats.