Information Security Architect

US Anesthesia Partners; United States; On-site; USD 130,000 - 170,000; Full time

Job summary

US Anesthesia Partners seeks an Information Security Architect to lead secure design and governance across enterprise applications and systems. You will partner with developers, DevOps, cloud teams, and security to embed security into the SDLC while enabling rapid delivery of cloud-based solutions.

The ideal candidate has deep expertise in cloud security architecture, threat modeling, and modern cloud platforms such as AWS and Azure.

Qualifications

• SSDLC and DevSecOps practices are required.
• Experience securing enterprise environments across on‑prem, hybrid, and cloud.
• Strong understanding of secure coding principles and OWASP Top 10.
• Experience with Azure DevOps, CI/CD pipelines, and version control.
• Healthcare industry experience and CISSP is preferred.

Responsibilities

• Establish and enforce secure software development standards and cloud security best practices.
• Lead security lifecycle by reviewing technologies, threats, and end-of-life governance for apps and tech.
• Participate in and mature Architectural Review Board with a security lens.
• Review application architecture diagrams and runbooks for security.
• Partner with engineering and DevOps to embed security into CI/CD pipelines.
• Conduct architecture risk assessments, threat modeling, and secure design reviews.
• Develop security reference architectures, design patterns, and technical standards for cloud-native apps.
• Lead application security initiatives including SAST, DAST, SCA, IaC scanning, container security, and API security.
• Collaborate with enterprise architects to ensure cloud security guidance is implemented.

Skills

SSDLC/DevSecOps

Cloud security

Threat modeling

Security architecture

Security leadership

Security governance

Communication & collaboration

Problem solving

Education

Bachelor's degree in CS/IS or related field

Tools

Azure DevOps

Git repositories

SIEM

EDR/XDR

PAM/DLP tooling

Job description

Overview

US Anesthesia Partners is the highest-quality single-specialty anesthesia practice in the United States, with over 6,000 employees distributed across 10 states. Our clinical and non-clinical staff support each other as they work toward a common vision: Forging a better future by empowering people to advance exceptional care.

POSITION SUMMARY

The Information Security Architect is a functional, hands-on architect whose responsibility is to lead the governance and maturation of secure design, implementation and management for Enterprise applications and systems across all IT domains. This role partners closely with developers, DevOps, cloud infrastructure, networking, solution architects and security teams to embed security throughout the software development lifecycle (SDLC) while enabling rapid delivery of cloud-based solutions.

The ideal candidate has deep expertise in cloud security architecture, application security, DevSecOps, threat modeling, and modern cloud platforms such as AWS and Azure. This role also requires extensive knowledge and understanding of platform architecture, software development, well architected frameworks, and the ability to solve complex technical challenges. The Information Security Architect will serve as a trusted advisor to development teams, helping design resilient, scalable, and secure applications that meet business and regulatory requirements.

Job Highlights

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Establish es and enforce s secure software development standards and cloud security best practices.


• Lead s the security lifecycle by reviewing emerging technologies, threats , and trends as well as maturing end of life governance for applications and technologies.


• Participate s in and mature s the Architectural Review Board by applying a security focused mindset to all IT domains being reviewed.


• Review s application architecture documentation including diagrams and runbooks with a security focused lens.


• Partner s with engineering and DevOps teams to create security governance and best practice into CI/CD pipelines.


• Conduct s architecture risk assessments, threat modeling, and secure design reviews for new and existing applications.


• Develop s security reference architectures, design patterns, and technical standards for cloud-native applications.


• Lead s application security initiatives including SAST, DAST, s oftware c omposition a nalysis (SCA), Infrastructure as Code (IaC) scanning, container security, and API security.


• Work s directly with the e nterprise a rchitect to ensure that overall enterprise security architecture, governance , and guidance is being executed on all IT domain levels.


• Evaluate s cloud services and third-party technologies for security risks and compliance requirements.


• Collaborate s with s ecurity o perations, i nfrastructure, c ompliance, and e ngineering teams to investigate and resolve security findings.


• Acts as a trusted advisor to development, infrastructure, network, cloud, data, and security teams.


• Ensure s cloud applications comply with organizational policies and applicable regulatory frameworks such as PCI DSS, HIPAA, SOC 2, ISO 27001, NIST, and GDPR.


• Provide s technical leadership and mentorship to development teams on secure coding practices and cloud security.


• Performs other duties as assigned by management.

Qualifications

K NOWLEDGE/SKILLS/ABILITIES (KSAs):

• Bachelor’s degree in computer science, business, or a related field required ( or equivalent work experience ) .


• 7+ years of experience securing enterprise environments across on-premises, hybrid, and cloud infrastructures.


• Strong understanding of secure software development lifecycle (SSDLC) and DevSecOps practices.


• Strong knowledge of secure coding principles and common application vulnerabilities (OWASP Top 10, API Security Top 10).


• Solid knowledge and experience working with Azure Dev Ops technology with focus on CI/CD pipelines and GIT repositories.


• Strong knowledge of identity and access management, authentication, authorization, OAuth, OpenID Connect, SAML, risk management , and Zero Trust principles.


• Strong familiarity with SIEM, EDR/XDR, IAM, PAM, CASB, DLP, and vulnerability management platforms.


• Experience in healthcare is preferred.


• CISSP certification is preferred.


• Ability to understand and translate business needs , aligning them to proper technical application solutions.


• Ability to translate security policy, regulatory requirements, and risk findings into practical architecture guidance.


• Excellent communication and collaboration skills with the ability to work with multiple teams simultaneously .


• Excellent time management skills and ability to work on multiple business critical projects simultaneously.


• Understanding of core security and compliance principles in a healthcare environment.


• Strong analytical and problem-solving skills with the ability to solve complex technical problems.