principal security architect

BlueCross BlueShield of Tennessee

<div><div>BlueCross BlueShield of Tennessee is hiring a Principal Security Architect. In this critical role, you&rsquo;ll help drive security architecture across our hybrid environment.</div><div></div><div>
Fostering collaboration across EIT, Information Delivery and external stakeholders, you&rsquo;ll ensure our designs and implementations are meeting BCBST security standards and keeping risk mitigation top of mind. This is a unique opportunity to bolster cloud security, influence AI adoption and reduce risk across the enterprise, safeguarding the 3.4 million <div>members and communities we serve</div></div><div></div><div>
Our ideal candidates will bring:</div><ul><li><div>
Production experience in healthcare, hospital systems, payor systems, and/or other regulatory environments</div></li><li><div>
Excitement around and (experience with securing) AI platforms like Vertex (or similar Generative AI cloud platforms).</div></li><li><div>
Experience using threat modeling to identify the security patterns or controls needed in a solution design</div></li></ul><div></div><div>
Note:</div><ul><li><div>
While this is a fully remote role, final onsite interviews at our Chattanooga, Tennessee headquarters will be required.</div></li><li><div>
Sponsorship is not available for this role.</div></li></ul><div></div><div>
Job Responsibilities</div><ul><li>
Develop, maintain and communicate policies, standards and procedures to manage security functions relative to information technology systems (including systems under development), networks, applications, and voice and data communications that are consistent with applicable regulatory and compliance requirements.</li><li>
Defines and develops security requirements using risk assessments, threat modeling, testing and analysis of existing systems.</li><li>
Review system security measures and identity strengths, weaknesses and vulnerabilities in existing systems and plan to implement design and architectural changes to protect existing infrastructure and to incorporate future solutions.</li><li>
Partners with stakeholders to provide risk-based guidance and encourage the adoption of security-compatible system design.</li><li>
Cultivates a culture of security awareness and promotes continues education of personnel to ensure adherence to security policies and compliance requirements.</li><li>
Tracks emerging security practices, standards, and keeps abreast of cyber threat information with actionable information influencing security architecture and design</li><li>
Provide subject matter expertise on a broad range of information security standards and best practices, such as NIST, PCI, ISO 27001, MAR and others as applicable.</li><li>
Work with Enterprise Architecture team, Information Security team, and appropriate stakeholders to prepare and present relevant information on security status as required.</li></ul><div></div><div>
Job Qualifications<br>
Education</div><ul><li>
Bachelor&rsquo;s Degree in Business, Computer Science or equivalent work experience required. Equivalent years of experience are determined as one year of technical experience for every year of college requested.</li></ul><div></div><div>
Experience</div><ul><li>
7 years - Experience as an individual contributor leading a team in the design and implementation of one or more of the following: application and integration, data, technology and/or security architecture required.</li><li>
Experience reviewing vendors and products, making sure they align with organizational security policies and standards</li><li>
Experience using threat modeling to identify the security patterns or controls needed in a solution design</li><li>
Extensive experience in information security and/or other IT role with a focus on security, performance and reliability</li></ul><div></div><div>
Skills\Certifications</div><ul><li>
Information Security certifications such as the Certified Information Systems Security Professional Certification (CISSP) or Certified Information Security Manager Certification (CISM) is preferred for this position</li><li>
Advanced understanding of security protocols, cryptography, authentication, authorization, system and data security.</li><li>
Working knowledge of current IT risks and experience implementing security solutions for on-premises and cloud solutions</li><li>
Excellent oral and written communication skills as well as business acumen to communicate details about security infrastructure, policies, and practices to technical and nontechnical colleagues</li><li>
Strong interpersonal and organizational skills</li><li>
Ability to manage multiple projects and priorities</li><li>
Ability to act as a mentor</li><li>
Ability to work independently with minimal supervision or function in a team environment, sharing responsibilities, roles, and accountability</li><li>
Ability to collaborate with a cross-functional teams to explain and enforce security measures</li><li>
Ability to apply security concepts and controls to adapt to organizations&rsquo; needs and goals</li></ul><div></div><div><br>
Number of Openings Available</div>
1<div></div><div>
Worker Type:</div>
Employee<div></div><div>
Company:</div>
BCBST BlueCross BlueShield of Tennessee, Inc.<div></div><div>
Applying for this job indicates your acknowledgement and understanding of the following statements:</div><div>
BCBST will recruit, hire, train and promote individuals in all job classifications without regard to race, religion, color, age, sex, national origin, citizenship, pregnancy, veteran status, sexual orientation, physical or mental disability, gender identity, or any other characteristic protected by applicable law.</div><div></div><div>
Further information regarding BCBST's EEO Policies/Notices may be found by reviewing the following page:</div><div><div>
BCBST's EEO Policies/Notices</div></div><div></div><div>
BlueCross BlueShield of Tennessee is not accepting unsolicited assistance from search firms for this employment opportunity. All resumes submitted by search firms to any employee at BlueCross BlueShield of Tennessee via-email, the Internet or any other method without a valid, written Direct Placement Agreement in place for this position from BlueCross BlueShield of Tennessee HR/Talent Acquisition will not be considered. No fee will be paid in the event the applicant is hired by BlueCross BlueShield of Tennessee as a result of the referral or through other means.</div></div><div></div>

Principal Security Architect

CVS Health

<div><p>We&rsquo;re building a world of health around every individual &mdash; shaping a more connected, convenient and compassionate health experience. At CVS Health&reg;, you&rsquo;ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger &ndash; helping to simplify health care one person, one family and one community at a time.</p><p></p><p>
Position Summary</p><p>
Are you passionate about navigating the ever-changing security landscape filled with evolving technical challenges? Do you enjoy tinkering with tools after hours to explore the possibilities of security and AI? We are seeking T-shaped Archineers (Architect + Engineer) who can seamlessly transition from high-level concepts to the delivery of groundbreaking products that will disrupt the healthcare industry. Does this sound like you? Join our team of passionate, hands-on technologists on a mission to innovate healthcare and make a lasting impact!</p><p></p><ul><li>This position can work remotely from anywhere in the continental USA.</li></ul><p></p><div><div><p>
What you will do</p></div><div><ul><li><p>
Be part of a team responsible for enabling secure technology solutions that meets our business strategy and drives business value.</p></li></ul></div><div><ul><li><p>
Define and collaborate on the creation of security roadmaps, security reference architectures, standards, best practice documents, and secure-by-design reference implementations that accelerate delivery while ensuring safety and compliance.</p></li></ul></div><div><ul><li><p>
Evaluate market trends in cybersecurity, execute buy vs. build decisions and assess cost and the risk impact on targeted business outcomes.</p></li></ul></div><div><ul><li><p>
Define future state security architecture that supports secure adoption of Artificial Intelligence, APIs, data stores, cloud infrastructures, cloud services, and microservices.</p></li></ul></div><div><ul><li><p>
Collaborate and consult with technology, cybersecurity, and business partners to optimize business applications and systems that adopt modern and secure architectures, especially around AI.</p></li></ul></div><div><ul><li><p>
Develop and maintain a strategic vision for the secure use of AI technologies, aligned to the CVS Health platform based on key business drivers, regulatory requirements, and emerging threat trends.</p></li></ul></div><div><ul><li><p>
Define and collaborate on the creation of security frameworks for the enterprise that promote reuse, reduces cost, manages risk, and increases speed to market.</p></li></ul></div><div><ul><li><p>
Effectively build and maintain strong relationships with technology, cybersecurity, and business partners to establish trust and influence key security decisions.</p></li></ul></div><div><ul><li><p>
Provide guidance, direction and mentorship to engineers and other stakeholders regarding security architecture and secure design of enterprise applications.</p></li></ul></div><div><ul><li><p>
Ensure all Non-Functional Security Requirements (e.g., authentication, authorization, resilience, encryption, auditability, availability, etc.) are properly articulated, and work with all parties to guarantee that delivered software products meet these objectives.</p></li></ul></div><div><ul><li><p>
Participates in high-level security estimation and security evaluation of AI-enabled solutions.</p></li></ul></div><div><ul><li><p>
Mentor and coach junior architects and seek the opportunity to bring continuous improvement in secure engineering and enterprise security practices.</p></li></ul></div><p></p><div><p><br>
Required Qualifications:</p></div><div><ul><li><p>
15+ years of relevant work experience (8+ years in architecture)</p></li></ul></div></div><div><div><ul><li><p>
10+ years of experience building or securing large-scale business applications using modern technologies and architectural patterns.</p></li></ul></div><div><ul><li><p>
10+ years of experience designing secure integrations with a focus on performance, resilience, and loose coupling using APIs, microservices, and event-driven architecture.</p></li></ul></div><div><ul><li><p>
8+ years of experience and proficiency with modern languages, frameworks, and associated secure development practices.</p></li></ul></div><div><ul><li><p>
6+ years of experience facilitating implementation of secure north star architectures by delivery teams through mentoring and building POCs, secure patterns, and other collaborative activities.</p></li></ul></div><div><ul><li><p>
Expert-level understanding of security architectural methodologies/best practices, regulatory and compliance requirements, and risk frameworks that influence architecture decisions.</p></li></ul></div><div><ul><li><p>
Recognized technical leader with full stack technology knowledge and recognized as an expert in one or more security domains like Identity &amp; access management (IAM), network security, cloud security (AWS/Azure/GCP), data protection, zero trust, or security operations.</p></li></ul></div><div><ul><li><p>
Experience recognizing the impact security architecture decisions can have on strategic business decisions.</p></li></ul></div><div><ul><li><p>
Substantial experience with requirements analysis, risk assessment, estimation, and secure application design.</p></li></ul></div><div><ul><li><p>
Experience defining architecture using the C4 model or equivalent, with a focus on system context, container, component diagrams, including secure trust boundaries.</p></li></ul></div><div><ul><li><p>
Expert understanding of architectural governance, security design patterns, AI safety controls, secure development standards, and best practices.</p></li></ul></div><div><ul><li><p>
A diverse technical background with key areas of depth around AI/ML/Agentic AI security, cloud security, data platform security, hybrid solutions and operating securely at scale.</p></li></ul></div><div><ul><li><p>
Excellent collaboration, influencing, negotiation, coaching and coalition-building skills.</p></li></ul></div><p></p><div><p><br>
Preferred Qualifications:</p></div><div><ul><li><p>
Experience developing security architecture using agile methodology or SAFe practices.</p></li></ul></div><div><ul><li><p>
Experience in AI security architecture and practical application of AI technologies.</p></li></ul></div><div><ul><li><p>
Experience with the concepts and practical application of AI security, and the future of secure autonomous systems.</p></li></ul></div><div><ul><li><p>
A self-starter that is naturally inquisitive and proactive in identifying threats and emerging risks.</p></li></ul></div><p></p><div><p><br>
Education</p></div></div><div><p>
Bachelor&rsquo;s degree in computer science or related field.</p></div><p></p><p><b>
Pay Range</b></p><p>
The typical pay range for this role is:</p><p></p>
$144,200.00 - $288,400.00<p><br>
This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company&rsquo;s equity award program.</p><p><br>
Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.</p><p></p><p><b>
Great benefits for great people</b></p><p></p><p>
We take pride in our comprehensive and competitive mix of pay and benefits &ndash; investing in the physical, emotional and financial wellness of our colleagues and their families to help them be the healthiest they can be. In addition to our competitive wages, our great benefits include:</p><ul><li><p><b>
Affordable medical plan options,</b> a <b>401(k) plan </b>(including matching company contributions), and an <b>employee stock purchase plan</b>.</p></li><li><p><b>
No-cost programs for all colleagues </b>including wellness screenings, tobacco cessation and weight management programs, confidential counseling and financial coaching.</p></li><li><p><b>
Benefit solutions that address the different needs and preferences of our colleagues</b> including paid time off, flexible work schedules, family leave, dependent care resources, colleague assistance programs, tuition assistance, retiree medical access and many other benefits depending on eligibility.</p></li></ul><p></p><p>
For more information, visit https://jobs.cvshealth.com/us/en/benefits</p><p></p>
We anticipate the application window for this opening will close on: 05/31/2026<p></p><p>
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.</p></div>

Search 10000+ Principal security architect jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 principal security architect jobs Near Me

Principal Security Architect

Principal Security Architect

Principal Security Architect

Principal Security Architect

Principal Security Architect

Principal Security Architect

Principal Security Architect