Application Security & DevSecOps Architect

Medical Mutual; Cleveland (OH); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Laptop + monitors

On-site fitness center

On-site cafeteria

Discounts for Medical Mutual staff

Cash rewards program

Business casual attire

Job summary

Medical Mutual, based in Ohio, seeks an Application Security & DevSecOps Architect to lead secure architecture design and DevSecOps practices across the enterprise. This hybrid role requires coordinating security throughout the SDLC and acting as the technical authority on application security, vulnerability management, and pipeline security.

Responsibilities include SME guidance, future-state planning, and collaboration on architecture reviews and IT standards.

Qualifications

• Bachelor's degree in Computer Science or related field or equivalent combination of training/education and experience.
• 3-5-7 years proven ability to transfer technology to end-user environments depending on level (Architect I: 3 years, Architect II: 5 years, Architect III: 7 years).
• Experience influencing technical direction in application, databases, or infrastructure.
• Professional certifications: None required.

Responsibilities

• Act as a subject-matter expert (SME) to assist various IT areas in supporting efficiencies in overall design for implementations of new technologies and improvement of existing processes. Advises on best practices and ensures policy and procedure adherence.
• Assist in defining the current and future state and the transitional plan. Focus on incremental improvements moving toward the future state, identifying opportunities to streamline environments and remove redundancy.
• Collaborate within teams and participate in reviews of all prospective software and hardware acquisitions. Evaluate compatibility with current architecture and support future architecture roadmaps. Identify architectural risks and propose alternatives and solutions, documenting exceptions to architectural standards.
• Assist in the review and revisions of new and existing IT standards and policies, evaluating their importance, and help develop architectural metrics and reports.
• Maintain active awareness of IT industry developments, emerging trends, development tools and best practices.
• Perform other duties as assigned.

Skills

SAST tooling

DAST tooling

SCA & IaC scanning

Container security

Threat modeling

API security

CI/CD tooling

Cloud security

Kubernetes

Zero Trust

OWASP Top 10

Education

Bachelor's degree in Computer Science or related field

Tools

Snyk

Wiz

Checkmarx

Veracode

Semgrep

SonarQube

Qualys

Burp Suite

OWASP ZAP

Invicti

Azure DevOps

GitHub Actions

Jenkins

GitLab

AWS

Azure

Docker

Kubernetes

Job description

Application Security & DevSecOps Architect

Hybrid remote role based out of the Dublin, OH office, with employees expected to work onsite on designated in‑office days each week. Founded in 1934, Medical Mutual is the oldest and one of the largest health insurance companies based in Ohio, providing peace of mind to more than 1.2 million members through high‑quality health, life, disability, dental, vision and indemnity plans.

The Application Security & DevSecOps Architect will lead the design and implementation of secure application architecture and DevSecOps practices across the enterprise, embed security throughout the software development lifecycle (SDLC) to reduce risk, improve resiliency, and enable scalable, secure software delivery. The role serves as the primary technical authority for application security, vulnerability management, and DevSecOps pipeline security.

Preferred Technical Skills

• Hands‑on experience with application security tooling:




• SAST (Snyk, Wiz, Checkmarx, Veracode, Semgrep, SonarQube)


• DAST (Qualys, Burp Suite, OWASP ZAP, Invicti)


• SCA, IaC scanning, container security tools




• Strong knowledge of:




• OWASP Top 10, CWE Top 25


• Threat modeling (STRIDE, PASTA, or equivalent)


• API security and authentication (OAuth2, OIDC, SAML)




• Experience with:




• CI/CD platforms (Azure DevOps, GitHub Actions, Jenkins, GitLab)


• Cloud security (AWS, Azure)


• Containers and orchestration (Docker, Kubernetes)




• Working knowledge of secure architecture patterns and Zero Trust principles

Responsibilities

• Act as a subject‑matter expert (SME) to assist various IT areas in supporting efficiencies in overall design for implementations of new technologies and improvement of existing processes. Advises on best practices and ensures policy and procedure adherence.


• Assist in defining the current and future state and the transitional plan. Focus on incremental improvements moving toward the future state, identifying opportunities to streamline environments and remove redundancy.


• Collaborate within teams and participate in reviews of all prospective software and hardware acquisitions. Evaluate compatibility with current architecture and support future architecture roadmaps. Identify architectural risks and propose alternatives and solutions, documenting exceptions to architectural standards.


• Assist in the review and revisions of new and existing IT standards and policies, evaluating their importance, and help develop architectural metrics and reports.


• Maintain active awareness of IT industry developments, emerging trends, development tools and best practices.


• Perform other duties as assigned.

Qualifications

• Bachelor's degree in Computer Science or related field or equivalent combination of training/education and experience.


• 3‑5‑7 years proven ability to transfer technology to end‑user environments depending on level (Architect I: 3 years, Architect II: 5 years, Architect III: 7 years).


• Experience influencing technical direction in application, databases, or infrastructure.


• Professional certifications: None required.

Technical Skills and Knowledge

• Expertise in one or more technologies (Microsoft, OpenSource, databases).


• Experience with suite of IT applications including transactional, middleware integration, workflow, web‑based.


• Solid/advanced knowledge in infrastructure and networks with a focus on security.


• Solid/advanced understanding of various project methodology disciplines and information and systems architectures, highly proficient in website architectures.


• Advanced knowledge of database platforms and data warehousing.


• Exposure to EA Framework such as FEAC, TOGAF or DODAF.

Great Place to Work

• Equipment provided: laptop, monitors, keyboard, mouse, headset.


• On‑site fitness center or gym membership reimbursement.


• On‑site cafeteria serving hot breakfast and lunch at the Brooklyn, OH headquarters.


• Discounts at many places in and around town for Medical Mutual team members.


• Opportunity to earn cash rewards for shopping with our customers.


• Business casual attire, including jeans.

Excellent Benefits and Compensation

• Employee bonus program.


• 401(k) with company match up to 4% and additional company contribution.


• Health Savings Account with a company matching contribution.


• Excellent medical, dental, vision, life and disability insurance.


• Employee Assistance Program with counseling, coaching, self‑help resources and work/life assistance.


• Company holidays and up to 16 PTO days during the first year of employment, with options to carry over unused PTO.


• After 120 days of service, parental leave for eligible employees who become parents through maternity, paternity or adoption.

An Investment in You

• Career development programs and classes.


• Mentoring and coaching to help advance your career.


• Tuition reimbursement up to $5,250 per year (IRS maximum).


• Diverse, inclusive and welcoming culture with Business Resource Groups.

Equal Opportunity Employer / Protected Veterans / Individuals with Disabilities

This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.