Information Security Architect

U.S. Anesthesia Partners; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

US Anesthesia Partners is seeking an Information Security Architect to lead governance and maturation of secure design across enterprise applications, partnering with developers, DevOps, cloud infrastructure, networking, solution architects and security teams to embed security throughout the software development lifecycle (SDLC) for cloud-based solutions.

The ideal candidate has deep expertise in cloud security architecture, application security, DevSecOps, threat modeling, and modern cloud

Qualifications

• Bachelor’s degree or equivalent work experience.
• 7+ years of experience securing enterprise environments across on-premises, hybrid, and cloud infrastructures.
• Strong understanding of SSDLC and DevSecOps practices.
• Strong knowledge of secure coding principles and OWASP Top 10.
• Experience with Azure DevOps and CI/CD pipelines.
• Knowledge of IAM, OAuth, OIDC, SAML, risk management, and Zero Trust.
• Familiarity with SIEM, EDR/XDR, IAM, PAM, CASB, DLP, and vulnerability management.
• Healthcare experience and CISSP are preferred.
• Ability to translate business needs into technical solutions.
• Excellent communication and collaboration skills.
• Understanding of healthcare security and compliance principles.
• Strong analytical and problem-solving skills.

Responsibilities

• Establishes and enforces secure software development standards and cloud security best practices.
• Matures architectural review processes with a security-focused mindset across IT domains.
• Reviews architecture diagrams and runbooks for security implications.
• Collaborates with engineering and DevOps to embed security into CI/CD pipelines.
• Conducts architecture risk assessments and threat modeling for new and existing apps.
• Develops security reference architectures and design patterns for cloud-native apps.
• Leads application security initiatives like SAST, DAST, SCA, IaC scanning, container security, and API security.
• Advises development teams on secure coding and regulatory compliance.

Skills

SSDLC

DevSecOps

CI/CD pipelines

Azure DevOps

Git repositories

IAM / OAuth / OIDC / SAML

Threat modeling

Cloud security

Security governance

Security architecture

Communication

Regulatory compliance

Education

Bachelor’s degree in computer science, business, or a related field

Tools

Azure DevOps

Git

Job description

Overview

US Anesthesia Partners is the highest-quality single-specialty anesthesia practice in the United States, with over 6,000 employees distributed across 10 states. Our clinical and non-clinical staff support each other as they work toward a common vision: Forging a better future by empowering people to advance exceptional care.

POSITION SUMMARY

The Information Security Architect is a functional, hands-on architect whose responsibility is to lead the governance and maturation of secure design, implementation and management for Enterprise applications and systems across all IT domains. This role partners closely with developers, DevOps, cloud infrastructure, networking, solution architects and security teams to embed security throughout the software development lifecycle (SDLC) while enabling rapid delivery of cloud-based solutions.

The ideal candidate has deep expertise in cloud security architecture, application security, DevSecOps, threat modeling, and modern cloud platforms such as AWS and Azure. This role also requires extensive knowledge and understanding of platform architecture, software development, well architected frameworks, and the ability to solve complex technical challenges. The Information Security Architect will serve as a trusted advisor to development teams, helping design resilient, scalable, and secure applications that meet business and regulatory requirements.

Job Highlights

ESSENTIAL DUTIES AND RESPONSIBILITIES: (The ideal candidate must be able to complete all physical requirements of the job with or without a reasonable accommodation) Pineapple

• Establishes and enforces secure software development standards and cloud security best practices.
• Leads the security lifecycle by reviewing emerging technologies, threats, and trends as well as maturing end of life governance for applications and technologies.
• Participates in and matures the Architectural Review Board by applying a security focused mindset to all IT domains being reviewed.
• Reviews application architecture documentation including diagrams and runbooks with a security focused lens.
• Partners with engineering and DevOps teams to create security governance and best practice into CI/CD pipelines.
• Conducts architecture risk assessments, threat modeling, and secure design reviews for new and existing applications.
• Develops security reference architectures, design patterns, and technical standards for cloud-native applications.
• Leads application security initiatives including SAST, DAST, software composition analysis (SCA), Infrastructure as Code (IaC) scanning, container security, and API security.
• Works directly with the enterprise architect to ensure that overall enterprise security architecture, governance, and guidance is being executed on all IT domain levels.
• Evaluates cloud services and third-party technologies for security risks and compliance requirements.
• Collaborates with security operations, infrastructure, compliance, and engineering teams to investigate and resolve security findings.
• Acts as a trusted advisor to development, infrastructure, network, cloud, data, and security teams.
• Ensures cloud applications comply with organizational policies and applicable regulatory frameworks such as PCI DSS, HIPAA, SOC 2, ISO 27001, NIST, and GDPR.
• Provides technical leadership and mentorship to development teams on secure coding practices and cloud security.
• Performs other duties as assigned by management.

Qualifications

KNOWLEDGE/SKILLS/ABILITIES (KSAs):

• Bachelor’s degree in computer science, business, or a related field required (or equivalent work experience).
• 7+ years of experience securing enterprise environments across on-premises, hybrid, and cloud infrastructures.
• Strong understanding of secure software development lifecycle (SSDLC) and DevSecOps practices.
• Strong knowledge of secure coding principles and common application vulnerabilities (OWASP Top 10, API Security Top 10).
• Solid knowledge and experience working with Azure Dev Ops technology with focus on CI/CD pipelines and GIT repositories.
• Strong knowledge of identity and access management, authentication, authorization, OAuth, OpenID Connect, SAML, risk management, and Zero Trust principles.
• Strong familiarity with SIEM, EDR/XDR, IAM, PAM, CASB, DLP, and vulnerability management platforms.
• Experience in healthcare is preferred.
• CISSP certification is preferred.
• Ability to understand and translate business needs, aligning them to proper technical application solutions.
• Ability to translate security policy, regulatory requirements, and risk findings into practical architecture guidance.
• Excellent communication and collaboration skills with the ability to work with multiple teams simultaneously.
• Excellent time management skills and ability to work on multiple business critical projects simultaneously.
• Understanding of core security and compliance principles in a healthcare environment.
• Strong analytical and problem-solving skills with the ability to solve complex technical problems.