Senior Security Architect - Enterprise & Cloud

OpenLoop Health, Inc.; Northern (KY); Hybrid; USD 170,000 - 260,000; Full time

Benefits offered by this job

Medical, Dental, and Vision plans

Flexible Spending/Health Savings

Flexible PTO

401(k) + Company Match

Life Insurance, Pet insurance, and for

Job summary

OpenLoop Health, Inc. is seeking a Sr Staff Security Architect to be the most senior technical authority on security architecture, approving architecture decisions and leading reviews.

You will drive threat modeling, define standards, and create reference designs that engineering builds against. You will own security architecture across cloud, applications, and corporate systems, guiding secure-by-default practices, and partnering with CTO and security leadership to map long-term architecture

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent professional experience.
• 10+ years of progressive security experience, with at least 5 years focused on security architecture across enterprise and cloud environments.
• Deep expertise across application, cloud, IAM, network, and data protection.
• Hands-on experience architecting security solutions in cloud environments, including IAM, key management, encryption, and cloud-native security services.
• Proven threat modeling experience (STRIDE, PASTA, or equivalent) at varying scales, including training engineers.
• Strong SSDLC, OWASP principles, and secure design patterns.
• Proficiency in OAuth 2.0, OIDC, and SAML across multi-tenant and patient-facing apps.
• Experience with HIPAA Security Rule technical safeguards, HITRUST CSF, NIST CSF, SOC 2.
• Ability to communicate complex architectural risk to technical and executive audiences.

Responsibilities

• Own and evolve OpenLoop's security architecture across cloud infrastructure, applications, and corporate systems with standards and reference architectures.
• Lead threat modeling for product, engineering, and infrastructure initiatives, coaching engineers to threat model their own work.
• Conduct architecture reviews and provide actionable recommendations against security principles and regulatory requirements.
• Design and improve the architecture review process to scale with engineering velocity and self-service patterns.
• Partner with CTO and enterprise architecture to embed security review within governance.
• Define and champion application security standards including OAuth/OIDC, SAML, data protection controls, and HL7/FHIR interoperability.
• Establish and maintain a zero trust architecture strategy across identity, network, endpoint, and data layers.
• Oversee key management, secrets management, and certificate lifecycle practices in cloud environments.
• Own security architecture for third-party integrations and supply chain risk control at design stage.
• Mentor the security team and raise architectural thinking across domains.
• Translate GRC and privacy requirements into concrete architectural controls for PHI architecture.

Skills

Security architecture

Threat modeling

SSDLC

OAuth/OIDC

SAML

Cloud security

Zero trust

Key management

HIPAA & regulatory knowledge

Communication of risk

Education

Bachelor's degree in CS or related field

Tools

ADR / architecture reviews

Cloud IAM & encryption services

Job description

OpenLoop Health, Inc. is seeking a Sr Staff Security Architect to be the most senior technical authority on security architecture, approving architecture decisions and leading reviews.

You will drive threat modeling, define standards, and create reference designs that engineering builds against. You will own security architecture across cloud, applications, and corporate systems, guiding secure-by-default practices, and partnering with CTO and security leadership to map long-term architecture