Lead Security Architect, Connected Medical Platform

Insulet Corporation; San Diego (CA); Hybrid; USD 180,000 - 260,000; Full time

Job summary

Insulet Corporation is seeking a Principal Security Architect to define and lead the cybersecurity strategy for its connected insulin delivery platform, including pump, CGM integrations, mobile apps, and cloud services. This senior IC role sets the trust model, cryptography standards, PKI design, and secure software practices across the system to ensure patient safety and regulatory compliance.

You will collaborate with Product Security, regulatory, firmware, iOS/Android, and cloud teams, mentor

Qualifications

• Bachelor's degree in computer science, Electrical Engineering, or Computer Engineering.
• At least 10 years of professional experience, with substantial recent work architecting security for production connected systems.
• Demonstrated experience designing PKI and cryptographic key lifecycles, including issuance

Responsibilities

• Define and evolve the security architecture across the pump, the iOS and Android mobile apps, CGM integrations, and the cloud, including identity, key management, session security, secure update, telemetry, and API boundaries.
• Design and govern PKI: certificate hierarchies, device and service identity, provisioning, rotation, revocation, and secure key storage on the pump, in the iOS and Android mobile apps, and in the cloud.
• Set the cryptographic approach for therapy commands and health data, including authenticated sessions, protection in transit and at rest, signing, and how keys are generated, stored, and retired.
• Own identity architecture for patients, mobile apps, pumps, and cloud services, including authentication, authorization, and least-privilege access to therapy and device data.
• Lead BLE security design for both mobile apps: pairing and bonding, session encryption, device authentication, and how each mobile app and the pump keep a trustworthy link across reconnects. The security model stays consistent across iOS and Android.
• Define security requirements for CGM and other partner integrations, including BLE sensor onboarding, authenticity of incoming data, and cloud-to-cloud trust.
• Establish security and privacy controls for protected health information, aligned with HIPAA, FDA cybersecurity expectations, and healthcare privacy obligations.
• Drive threat modeling and security risk assessment early in design, and map controls to hazards, requirements, and residual risk for a regulated quality system.
• Review architectures and critical implementations, and mentor senior engineers so security intent survives implementation.
• Partner with Product Security to apply corporate guidance and constraints to this system, including identity, cryptography, vulnerability handling, logging, and supplier expectations. When the platform cannot meet a constraint, bring the specific gap: which constraint, which limit, which alternative control, and for how long.
• Serve on the Security Council as the R&D security architect. For security by design, bring the threat model and the recommended application of Product Security's constraints. For early-phase programs, name the constraints that will be expensive to change later and when a full design review is required. For field issues, determine what the product does and what a correct fix is, so the council can record one position on scope, severity, action, and what resolved means.
• Partner with firmware, iOS, Android, cloud, quality, human factors, and regulatory teams on interface contracts, verification evidence, and submission-ready cybersecurity documentation.
• Define how the system detects, responds to, and records vulnerabilities across the device fleet, both mobile apps, and partner-connected paths.
• Review security of shared non-UI logic where cross-platform code is used, while each therapy user interface remains native to iOS or Android.

Education

Bachelor's degree in computer science, Electrical Engineering, or Computer Engineering

Job description

Insulet Corporation is seeking a Principal Security Architect to define and lead the cybersecurity strategy for its connected insulin delivery platform, including pump, CGM integrations, mobile apps, and cloud services. This senior IC role sets the trust model, cryptography standards, PKI design, and secure software practices across the system to ensure patient safety and regulatory compliance.

You will collaborate with Product Security, regulatory, firmware, iOS/Android, and cloud teams, mentor