Strategic AppSec & DevSecOps Architect

Medical Mutual; Cleveland (OH); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Laptop + monitors

On-site fitness center

On-site cafeteria

Discounts for Medical Mutual staff

Cash rewards program

Business casual attire

Job summary

Medical Mutual, based in Ohio, seeks an Application Security & DevSecOps Architect to lead secure architecture design and DevSecOps practices across the enterprise. This hybrid role requires coordinating security throughout the SDLC and acting as the technical authority on application security, vulnerability management, and pipeline security.

Responsibilities include SME guidance, future-state planning, and collaboration on architecture reviews and IT standards.

Qualifications

• Bachelor's degree in Computer Science or related field or equivalent combination of training/education and experience.
• 3-5-7 years proven ability to transfer technology to end-user environments depending on level (Architect I: 3 years, Architect II: 5 years, Architect III: 7 years).
• Experience influencing technical direction in application, databases, or infrastructure.
• Professional certifications: None required.

Responsibilities

• Act as a subject-matter expert (SME) to assist various IT areas in supporting efficiencies in overall design for implementations of new technologies and improvement of existing processes. Advises on best practices and ensures policy and procedure adherence.
• Assist in defining the current and future state and the transitional plan. Focus on incremental improvements moving toward the future state, identifying opportunities to streamline environments and remove redundancy.
• Collaborate within teams and participate in reviews of all prospective software and hardware acquisitions. Evaluate compatibility with current architecture and support future architecture roadmaps. Identify architectural risks and propose alternatives and solutions, documenting exceptions to architectural standards.
• Assist in the review and revisions of new and existing IT standards and policies, evaluating their importance, and help develop architectural metrics and reports.
• Maintain active awareness of IT industry developments, emerging trends, development tools and best practices.
• Perform other duties as assigned.

Skills

SAST tooling

DAST tooling

SCA & IaC scanning

Container security

Threat modeling

API security

CI/CD tooling

Cloud security

Kubernetes

Zero Trust

OWASP Top 10

Education

Bachelor's degree in Computer Science or related field

Tools

Snyk

Wiz

Checkmarx

Veracode

Semgrep

SonarQube

Qualys

Burp Suite

OWASP ZAP

Invicti

Azure DevOps

GitHub Actions

Jenkins

GitLab

AWS

Azure

Docker

Kubernetes

Job description

Medical Mutual, based in Ohio, seeks an Application Security & DevSecOps Architect to lead secure architecture design and DevSecOps practices across the enterprise. This hybrid role requires coordinating security throughout the SDLC and acting as the technical authority on application security, vulnerability management, and pipeline security.

Responsibilities include SME guidance, future-state planning, and collaboration on architecture reviews and IT standards.