Principal Cloud Security Architect

Elevance Health; Grand Prairie (TX); Hybrid; USD 170,000 - 210,000; Full time

Job summary

Elevance Health is seeking a Principal Cloud Security Architect to lead cloud security strategy and architecture across enterprise platforms. You will partner with OCISO and architecture teams to define secure patterns, governance, and policy enforcement in a cloud-first environment.

The role requires deep cloud security expertise, experience mentoring teams, and a proven track record in regulated healthcare settings. Hybrid work with in-office collaboration 1–2 days per week is supported.

Qualifications

• Requires a BA/BS degree in Information Technology, Computer Science or related field and minimum 11 years of experience or equivalent background.
• Experience leading cloud security architecture across multiple cloud platforms (AWS, Azure, GCP).
• Strong knowledge of HIPAA, HITRUST, NIST, SOC2 and regulatory compliance in healthcare environments.

Responsibilities

• Lead design of secure, scalable cloud architectures across AWS, Azure, and/or GCP.
• Define enterprise cloud security policies, standards, and guardrails.
• Drive DevSecOps practices with automated security testing and secure CI/CD pipelines.

Skills

Cloud security

IAM

DevSecOps

Automation

Zero trust

Networking

Security architecture

Regulatory compliance

Threat modeling

Education

BA/BS in IT or related

Tools

Terraform

AWS/Azure/GCP

Kubernetes

CSPM/CWPP tools

Job description

Location: This role requires associates to be in-office 1 - 2 days per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace. Alternate locations may be considered if candidates reside within a commuting distance from an office.

Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless an accommodation is granted as required by law.

PLEASE NOTE: This position is not eligible for current or future visa sponsorship.

At Elevance Health, we are transforming how cloud technology supports healthcare delivery and innovation. The ideal Principal Cloud Security Architect candidate combines deep expertise in cloud platforms with advanced cloud security knowledge, and operates as a trusted advisor to senior leadership while mentoring cloud engineering and teams and driving a security-first culture.

The Principal Cloud Security Architect works with the business and technology stakeholders on the development and delivery of end-to-end application technology products and services for enterprise-wide technology application platforms that are aligned with the organization's strategic objectives and initiatives.

How You Will Make An Impact

• In partnership with OCISO and Enterprise Architecture, author and evangelize whitepapers/position papers covering all facets of cloud security.
• Lead the design of secure, scalable, and resilient cloud architectures across AWS, Azure, and/or GCP environments.
• Define enterprise cloud security policies, standards, reference architectures, and engineering guardrails aligned with Elevance Health policies.
• Design compliance-automation with healthcare regulations and frameworks (HIPAA, HITRUST, NIST, ISO).
• Design automated, secure patterns for IAM, encryption, network security, and zero trust architecture.
• Lead threat modeling, risk assessments, and remediation strategies for cloud-based systems.
• Champion DevSecOps practices; automated security testing, policy-as-code, and secure CI/CD pipelines.
• Partner with enterprise architecture, application teams, and security organizations to embed security into the cloud SDLC.
• Serve as a key advisor to leadership on cloud risk, strategy, and emerging technologies.
• Partners with leadership to design processes that will shape the foundation for emerging cloud technologies.
• Leads initiatives relating to cloud governance.
• Recommends new technology solutions and products are delivered to stakeholders and align with enterprise strategic objectives.
• Oversee the development and delivery of technical and/or functional specifications.
• Oversee the technical design reviews and testing to architectural technologies for application solutions and products meet business requirements.
• Assesses the compatibility and integration of solutions and products.
• Provides continuous consulting services and direction on projects.
• Champions and responsible for architectural standards, guidelines, principles, frameworks, and reference models.

Minimum Requirements

Requires an BA/BS degree in Information Technology, Computer Science or related field of study a minimum of 11 years experience; multi dimensional platform experience with business and technical applications; or any combination of education and experience, which would provide an equivalent background.

Preferred Skills, Experiences And Competencies

• Hands on experience with AI tooling; IDE and Services
• Strong expertise in cloud security including IAM, encryption, network security, and workload protection.
• Hands-on experience with infrastructure-as-code and automation tools.
• Deep understanding of networking concepts including VPCs, subnets, firewalls, and zero trust.
• Hands on experience implementing DevSecOps and secure CI/CD pipelines.
• Experience working in regulated environments, preferably healthcare.
• Strong knowledge of compliance frameworks such as HIPAA, HITRUST, NIST, and SOC2.
• Strong knowledge, and expertise, in cloud control policies and frameworks.
• Experience working with a variety of executives and their teams in a matrixed environment to deliver value and drive change. Cross-functional experience (e.g., strategy, change management, business process management).
• Industry certifications such as AWS Solutions Architect, AWS Security Specialty, Azure Security Engineer, or CISSP.
• Experience with containerization and orchestration (Docker, Kubernetes).
• Experience with cloud security tools such as CSPM, CWPP, SIEM, and secrets management platforms.
• Strong background in application security and secure coding practices.
• Experience in large-scale enterprise healthcare environments.