VP, Enterprise APIs

Humana

6d•Remote

About The Position

The Vice President, API Technologies is a senior leader in the Chief Technology Office accountable for the strategy, product management, engineering, governance, modernization, and reliable operation of Humana’s enterprise API and integration ecosystem, spanning internal APIs, external partner and ecosystem APIs, and the shared platforms that enable them. As a dedicated enterprise function, this role leads APIs capabilities end to end, from standards, product strategy, the Unified API Gateway, and the Unified API Catalog through the enterprise-wide shift to a consumer-centric Omnichannel API model that delivers consistent, secure experiences across member, provider, associate, and partner touchpoints. This leader runs APIs as products, treating API producers and consumers, internal and external, as customers. The VP owns the API product roadmap, lifecycle, investment priorities, adoption, reuse, health, and consumer experience. The VP is directly accountable for defining and creating Omnichannel APIs and for governing the modernization journey that migrates producers and consumers to modern, enterprise-aligned interfaces, while retiring redundant APIs, unsupported gateways, and legacy integration technologies. The role also owns Humana’s external API strategy, including the secure exposure of APIs to partners and the broader ecosystem, technical management of API-enabled partnerships, partner certification and onboarding, and the heightened security, privacy, interoperability, support, and continuity requirements of external interfaces. This is an AI-native function. The VP embeds AI into API design, delivery, governance, testing, and consumer migration, and establishes the enterprise approach for safely exposing approved API capabilities to AI agents through MCP and other emerging agent protocols where appropriate. The role is a primary enabler of interoperability, automation, resilient partner growth, and Humana’s 2030 Target State Architecture.

Requirements

Bachelor’s degree in Computer Science, Engineering, or a related field; 15+ years of progressive technology experience, including 8+ years leading API, integration, platform engineering, or product organizations.
Deep expertise in enterprise API and integration strategy, product management, standards, governance, gateways, catalogs, event-driven architecture, messaging, streaming, and modern integration patterns.
Proven experience defining and governing external and partner APIs, including secure exposure, partner onboarding, certification, developer experience, agreements and SLAs, support, and regulatory compliance.
Proven success running APIs or platforms as products, including roadmap and investment ownership, adoption, reuse, consumer experience, value realization, and product health at enterprise scale.
Demonstrated experience leading large-scale modernization across producers and consumers, retiring redundant services and legacy integration technologies with minimal disruption.
Experience applying AI and automation to API design, delivery, testing, governance, and migration, with knowledge of agentic integration patterns, MCP, or comparable emerging technologies.
Strong API and integration security acumen, including OAuth 2.x, approved token standards, workload identity, least privilege, zero-trust principles, secrets management, OWASP API risks, and external-facing authorization.
Demonstrated production leadership across reliability engineering, SLOs, resilience, incident and problem management, operational readiness, and continuity planning.
Proven organization leadership, including leading leaders, workforce strategy, succession planning, capability building, sourcing, and creation of high-performing product and engineering cultures.
Strong financial management and controls acumen, including multi-year investment planning, enterprise-scale budgets, vendor management, and regulated-environment accountability.
Exceptional executive stakeholder management and the ability to influence and align technology, business, risk, legal, and external-partner leaders.

Nice To Haves

Experience with API value-realization models, partner ecosystems, open or public API programs, and external developer platforms.
Hands-on familiarity with API gateway and catalog platforms, event and streaming technologies, GraphQL, and MCP.
Track record of enterprise-wide modernization, technical-debt reduction, middleware rationalization, and platform consolidation.
Experience in healthcare or another highly regulated industry, including interoperability standards such as CMS requirements and HL7 FHIR.

Responsibilities

API Product Strategy & Management: API-as-a-product operating model, including product vision, roadmap, investment, adoption, reuse, consumer experience, value realization, and health metrics.
API Standards, Governance & Security: Enterprise standards for REST, GraphQL, asynchronous messaging, event-driven APIs, and emerging protocols; full lifecycle governance; UAG and UAC; quality engineering; and API security in partnership with EIP.
Omnichannel API Definition & Creation: Definition, design, and build of consumer-centric Omnichannel APIs aligned to consumer journeys and providing governed, consistent access to authoritative capabilities and data across channels.
API Modernization: Producers & Consumers: Migration of producers and validated active consumers from legacy and point APIs to modern enterprise interfaces, including deprecation, retirement, dependency management, and progress reporting.
External APIs, Partnerships & Governance: External API strategy, secure exposure, technical partnership management, certification, developer experience, data-use controls, interoperability compliance, continuity, and third-party API consumption.
AI-Enabled API Governance & Execution: AI-assisted design, code generation, testing, compliance, and migration, plus risk-based MCP and agent-tool enablement with identity, authorization, human approval, auditability, and lifecycle controls.
API Operations, Observability & Talent: Reliability engineering, SLOs, resilience, incident and problem management, developer enablement, workforce strategy, succession, capability building, and vendor/platform management.
Own the enterprise API product strategy and operating model, including a published roadmap, investment and funding model, lifecycle, value realization, adoption, reuse, and health metrics.
Treat API producers and consumers, internal and external, as customers and use structured voice-of-consumer feedback to prioritize high-leverage, business-critical API products.
Maintain a governed API product registry aligned to the Unified API Catalog, with clear ownership, product classification, lifecycle status, dependencies, and business outcomes.
Drive measurable reductions in point-to-point integrations, duplication, onboarding time, and cost to serve.
Own and evolve enterprise standards for REST, GraphQL, asynchronous messaging, event-driven APIs, and emerging integration protocols, with API security standards jointly owned with EIP.
Govern the full lifecycle through automated intake and controls covering design, documentation, schema validation, development, contract testing, security testing, performance testing, deployment, monitoring, versioning, deprecation, and retirement.
Advance the Unified API Gateway and Unified API Catalog, including discoverability, subscription management, reusable patterns, policy enforcement, and real-time governance and compliance reporting.
Operationalize zero-trust API security through approved identity and token standards, workload identity, fine-grained authorization, threat protection, secrets management, and OWASP API coverage in partnership with EIP.
Establish contract-first engineering, backward-compatibility requirements, consumer-driven contract testing, breaking-change detection, sandbox and mocking capabilities, and release-readiness controls.
Define and create enterprise Omnichannel APIs aligned to consumer journeys, providing consistent, channel-agnostic access to authoritative capabilities and data across web, mobile, call center, IVR, agent, and partner channels.
Establish Omnichannel API design standards, reference patterns, and reusable building blocks so channels use governed enterprise interfaces rather than channel-specific, duplicative APIs.
Prioritize business-critical and high-leverage APIs that represent the majority of API volume, and design them with consumable schemas, metadata, documentation, and appropriate AI-agent readiness.
Partner with Enterprise Architecture and Data & Analytics so API contracts align to authoritative domain capabilities, enterprise information models, and governed data without creating competing sources of truth.
Own and govern the enterprise API modernization program, sequencing migration of the legacy and fragmented API estate to modern enterprise and Omnichannel interfaces in prioritized waves.
Drive producer modernization and consumer migration, transitioning validated active consumers for approved, in-scope retirement candidates with backward compatibility, controlled cutover, rollback readiness, and minimal disruption.
Govern dependency discovery, retirement, deprecation, exception management, and the removal of redundant APIs, unsupported gateways, and legacy integration technologies.
Track producer modernization, consumer cutover, API retirement, platform adoption, reuse, risk, and business value through executive-visible reporting, using established baselines and data-quality controls.
Own Humana’s external API strategy and the secure, standards-based exposure of APIs to partners, providers, vendors, and the broader ecosystem as a first-class product surface.
Lead the technical management of API-enabled partnerships, including partner segmentation, onboarding, certification and conformance testing, sandbox access, credentials and certificates, SLAs, versioning, support, escalation, and deprecation communications.
Establish heightened governance for partner identity, delegated authorization, fine-grained scopes, data sharing, minimum-necessary access, consent, privacy, PHI/PII protection, auditability, and applicable regulatory and interoperability obligations, including CMS and HL7 FHIR where relevant.
Govern third-party API consumption through technical due diligence, cataloging, dependency and concentration-risk monitoring, continuity planning, and exit or transition readiness.
Provide a governed external developer experience through an external portal, high-quality documentation, self-service onboarding where appropriate, production support, and observability at the edge.
Partner with business, Legal, Privacy, Procurement, and other accountable functions on agreements and value-realization models, including monetization where strategically and legally appropriate.
Embed AI into API design, code generation, documentation, testing, standards validation, migration analysis, and consumer cutover to improve delivery speed and quality.
Establish the enterprise approach for safely exposing approved API capabilities to AI agents through MCP and other emerging agent protocols where appropriate, rather than requiring agent enablement for every API.
Govern MCP servers and agent tools through bounded tool design, strict schemas, workload and user identity, least-privilege authorization, secrets management, gateway and egress policy enforcement, audit trails, versioning, and deprecation controls.
Require human approval and appropriate rollback or recovery mechanisms for high-risk, write, destructive, or material business actions initiated by agents.
Apply risk-based governance to internally developed and third-party MCP servers, documenting exceptions and using compensating controls where direct implementation control is limited.
Partner with Enterprise AI and Cybersecurity to ensure responsible, secure, observable, and auditable use of AI across the API and integration lifecycle.
Own the production operating model for shared API platforms, including SLOs, SLIs, error budgets, capacity, quotas, throttling, dependency mapping, synthetic monitoring, and operational-readiness reviews.
Ensure resilience through continuity and disaster-recovery planning, tested failover and recovery procedures, release and rollback readiness, and risk-based multi-region or platform-resilience patterns where required.
Lead incident and problem management for shared platforms and critical enterprise interfaces, including timely detection, restoration, root-cause analysis, corrective action, and systemic learning.
Build API and integration developer enablement, product documentation, golden paths, communities of practice, and support models that improve adoption and engineering quality across segments.
Design and lead the API Technologies organization, including workforce and sourcing strategy, succession planning, leadership development, career paths, performance culture, and capability building across API product management, engineering, security, FHIR, operations, and AI-agent enablement.
Manage platform vendors, licensing, FinOps, enterprise-scale budgets, audit readiness, controls, and regulatory compliance.