Job Posting Title Information Security Architect

U.S. Anesthesia Partners; United States; Hybrid; USD 140,000 - 190,000; Full time

Job summary

US Anesthesia Partners is seeking an Information Security Architect to lead secure design and governance across enterprise applications and systems. This hands-on role partners with developers, DevOps, cloud infrastructure, networking, solution architects and security teams to embed security throughout the software development lifecycle (SDLC) while enabling rapid delivery of cloud-based solutions.

The candidate should have 7+ years securing enterprise environments, strong SSDLC/DevSecOps

Qualifications

• Bachelor's degree or equivalent work experience in a related field.
• Experience securing enterprise environments across on-prem, hybrid, and cloud.
• Solid understanding of SSDLC and DevSecOps practices.
• Familiarity with OWASP Top 10, API Security Top 10.

Responsibilities

• Establishes secure software development standards and cloud security best practices.
• Leads security lifecycle review and governs end-of-life processes.
• Participates in Architectural Review Board with a security lens.
• Reviews architecture diagrams and runbooks for security alignment.
• Integrates security into CI/CD pipelines with DevOps teams.
• Conducts threat modeling and secure design reviews for apps.
• Develops security reference architectures and standards for cloud apps.
• Leads application security initiatives (SAST, DAST, SCA, IaC, container security).
• Collaborates with architects to ensure enterprise security governance.
• Evaluates cloud services for security risk and regulatory compliance.
• Mentors development teams on secure coding and cloud security.

Skills

SSDLC

DevSecOps

Secure coding

Cloud security

IAM & SAML/OIDC

Zero Trust

Threat modeling

CI/CD security

Communication

Team collaboration

Education

Bachelor's degree in computer science, business, or a related field

Tools

Azure DevOps

Job description

Overview

US Anesthesia Partners is the highest-quality single-specialty anesthesia practice in the United States, with over 6,000 employees distributed across 10 states. Our clinical and non-clinical staff support each other as they work toward a common vision: Forging a better future by empowering people to advance exceptional care.

POSITION SUMMARY:

The Information Security Architect is a functional, hands-on architect whose responsibility is to lead the governance and maturation of secure design, implementation and management for Enterprise applications and systems across all IT domains. This role partners closely with developers, DevOps, cloud infrastructure, networking, solution architects and security teams to embed security throughout the software development lifecycle (SDLC) while enabling rapid delivery of cloud-based solutions.

Job Highlights

ESSENTIAL DUTIES AND RESPONSIBILITIES

The ideal candidate must be able to complete all physical requirements of the job with or without a reasonable accommodation) Pineapple

• Establishes and enforces secure software development standards and cloud security best practices.
• Leads the security lifecycle by reviewing emerging technologies, threats, and trends as well as maturing end of life governance for applications and technologies.
• Participates in and matures the Architectural Review Board by applying a security focused mindset to all IT domains being reviewed.
• Reviews application architecture documentation including diagrams and runbooks with a security focused lens.
• Partners with engineering and DevOps teams to create security governance and best practice into CI/CD pipelines.
• Conducts architecture risk assessments, threat modeling, and secure design reviews for new and existing applications.
• Develops security reference architectures, design patterns, and technical standards for cloud-native applications.
• Leads application security initiatives including SAST, DAST, software composition analysis (SCA), Infrastructure as Code (IaC) scanning, container security, and API security.
• Works directly with the enterprise architect to ensure that overall enterprise security architecture, governance, and guidance is being executed on all IT domain levels.
• Evaluates cloud services and third-party technologies for security risks and compliance requirements.
• Collaborates with security operations, infrastructure, compliance, and engineering teams to investigate and resolve security findings.
• Acts as a trusted advisor to development, infrastructure, network, cloud, data, and security teams.
• Ensures cloud applications comply with organizational policies and applicable regulatory frameworks such as PCI DSS, HIPAA, SOC 2, ISO 27001, NIST, and GDPR.
• Provides technical leadership and mentorship to development teams on secure coding practices and cloud security.
• Performs other duties as assigned by management.

Qualifications

KNOWLEDGE/SKILLS/ABILITIES (KSAs):

• Bachelor's degree in computer science, business, or a related field required (or equivalent work experience).
• 7+ years of experience securing enterprise environments across on-premises, hybrid, and cloud infrastructures.
• Strong understanding of secure software development lifecycle (SSDLC) and DevSecOps practices.
• Strong knowledge of secure coding principles and common application vulnerabilities (OWASP Top 10, API Security Top 10).
• Solid knowledge and experience working with Azure Dev Ops technology with focus on CI/CD pipelines and GIT repositories.
• Strong knowledge of identity and access management, authentication, authorization, OAuth, OpenID Connect, SAML, risk management, and Zero Trust principles.
• Strong familiarity with SIEM, EDR/XDR, IAM, PAM, CASB, DLP, and vulnerability management platforms.
• Experience in healthcare is preferred.
• CISSP certification is preferred.
• Ability to understand and translate business needs, aligning them to proper technical application solutions.
• Ability to translate security policy, regulatory requirements, and risk findings into practical architecture guidance.
• Excellent communication and collaboration skills with the ability to work with multiple teams simultaneously.
• Excellent time management skills and ability to work on multiple business critical projects simultaneously.
• Understanding of core security and compliance principles in a healthcare environment.
• Strong analytical and problem-solving skills with the ability to solve complex technical problems.