Principal Security Architect

Position Summary Are you passionate about navigating the ever-changing security landscape filled with evolving technical challenges? Do you enjoy tinkering with tools after hours to explore the possibilities of security and AI? We are seeking T-shaped Archineers (Architect + Engineer) who can seamlessly transition from high-level concepts to the delivery of groundbreaking products that will disrupt the healthcare industry. This position can work remotely from anywhere in the continental USA. What you will do Be part of a team responsible for enabling secure technology solutions that meets our business strategy and drives business value. Define and collaborate on the creation of security roadmaps, security reference architectures, standards, best practice documents, and secure‑by‑design reference implementations that accelerate delivery while ensuring safety and compliance. Evaluate market trends in cybersecurity, execute buy vs. build decisions and assess cost and the risk impact on targeted business outcomes. Define future state security architecture that supports secure adoption of Artificial Intelligence, APIs, data stores, cloud infrastructures, cloud services, and microservices. Collaborate and consult with technology, cybersecurity, and business partners to optimize business applications and systems that adopt modern and secure architectures, especially around AI. Develop and maintain a strategic vision for the secure use of AI technologies, aligned to the CVS Health platform based on key business drivers, regulatory requirements, and emerging threat trends. Define and collaborate on the creation of security frameworks for the enterprise that promote reuse, reduces cost, manages risk, and increases speed to market. Effectively build and maintain strong relationships with technology, cybersecurity, and business partners to establish trust and influence key security decisions. Provide guidance, direction and mentorship to engineers and other stakeholders regarding security architecture and secure design of enterprise applications. Ensure all Non‑Functional Security Requirements (e.g., authentication, authorization, resilience, encryption, auditability, availability, etc.) are properly articulated, and work with all parties to guarantee that delivered software products meet these objectives. Participate in high‑level security estimation and security evaluation of AI‑enabled solutions. Mentor and coach junior architects and seek the opportunity to bring continuous improvement in secure engineering and enterprise security practices. Required Qualifications 15+ years of relevant work experience (8+ years in architecture) 10+ years of experience building or securing large‑scale business applications using modern technologies and architectural patterns. 10+ years of experience designing secure integrations with a focus on performance, resilience, and loose coupling using APIs, microservices, and event‑driven architecture. 8+ years of experience and proficiency with modern languages, frameworks, and associated secure development practices. 6+ years of experience facilitating implementation of secure north star architectures by delivery teams through mentoring and building POCs, secure patterns, and other collaborative activities. Expert‑level understanding of security architectural methodologies/best practices, regulatory and compliance requirements, and risk frameworks that influence architecture decisions. Recognized technical leader with full stack technology knowledge and recognized as an expert in one or more security domains like Identity & access management (IAM), network security, cloud security (AWS/Azure/GCP), data protection, zero trust, or security operations. Experience recognizing the impact security architecture decisions can have on strategic business decisions. Substantial experience with requirements analysis, risk assessment, estimation, and secure application design. Experience defining architecture using the C4 model or equivalent, with a focus on system context, container, component diagrams, including secure trust boundaries. Expert understanding of architectural governance, security design patterns, AI safety controls, secure development standards, and best practices. A diverse technical background with key areas of depth around AI/ML/Agentic AI security, cloud security, data platform security, hybrid solutions and operating securely at scale. Excellent collaboration, influencing, negotiation, coaching and coalition‑building skills. Preferred Qualifications Experience developing security architecture using agile methodology or SAFe practices. Experience in AI security architecture and practical application of AI technologies. Experience with the concepts and practical application of AI security, and the future of secure autonomous systems. A self‑starter that is naturally inquisitive and proactive in identifying threats and emerging risks. Education Bachelor’s degree in computer science or related field. Pay Range The typical pay range for this role is: $144,200.00 - $288,400.00. This pay range represents the base hourly rate or base annual full‑time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short‑term incentive program in addition to the base pay range listed above. This position also includes an award target in the company’s equity award program. Benefits We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families. This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility. Equal Opportunity Employer Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws. #J-18808-Ljbffr 9025 CVS Shared Services Resources LLC