Principal Cloud Security Architect

Cloud Principal Engineer - Security

Location: This role requires associates to be in-office 1 - 2 days per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace. Alternate locations may be considered if candidates reside within a commuting distance from an office.

Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless an accommodation is granted as required by law.

PLEASE NOTE: This position is not eligible for current or future visa sponsorship.

At Elevance Health, we are transforming how cloud technology supports healthcare delivery and innovation. The ideal Cloud Principal Engineer - Security candidate combines deep expertise in cloud platforms with advanced cloud security knowledge, and operates as a trusted advisor to senior leadership while mentoring cloud engineering and teams and driving a security-first culture.

The Cloud Principal Engineer - Security works with the business and technology stakeholders on the development and delivery of end-to-end application technology products and services for enterprise-wide technology application platforms that are aligned with the organization's strategic objectives and initiatives.

How you will make an impact:

• In partnership with OCISO and Enterprise Architecture, author and evangelize whitepapers/position papers covering all facets of cloud security.
• Lead the design of secure, scalable, and resilient cloud architectures across AWS, Azure, and/or GCP environments.
• Define enterprise cloud security policies, standards, reference architectures, and engineering guardrails aligned with Elevance Health policies.
• Design compliance-automation with healthcare regulations and frameworks (HIPAA, HITRUST, NIST, ISO).
• Design automated, secure patterns for IAM, encryption, network security, and zero trust architecture.
• Lead threat modeling, risk assessments, and remediation strategies for cloud-based systems.
• Champion DevSecOps practices; automated security testing, policy-as-code, and secure CI/CD pipelines.
• Partner with enterprise architecture, application teams, and security organizations to embed security into the cloud SDLC.
• Serve as a key advisor to leadership on cloud risk, strategy, and emerging technologies.
• Partners with leadership to design processes that will shape the foundation for emerging cloud technologies.
• Leads initiatives relating to cloud governance.
• Recommends new technology solutions and products are delivered to stakeholders and align with enterprise strategic objectives.
• Oversee the development and delivery of technical and/or functional specifications.
• Oversee the technical design reviews and testing to architectural technologies for application solutions and products meet business requirements.
• Assesses the compatibility and integration of solutions and products.
• Provides continuous consulting services and direction on projects.
• Champions and responsible for architectural standards, guidelines, principles, frameworks, and reference models.

Minimum Requirements:

Requires a BA/BS degree in Information Technology, Computer Science or related field of study a minimum of 11 years experience; multi dimensional platform experience, expert level experience with business and technical applications; or any combination of education and experience, which would provide an equivalent background.

Preferred Skills, Experiences and Competencies:

• Hands on experience with AI tooling; IDE and Services
• Strong expertise in cloud security including IAM, encryption, network security, and workload protection.
• Hands-on experience with infrastructure-as-code and automation tools.
• Deep understanding of networking concepts including VPCs, subnets, firewalls, and zero trust.
• Hands on experience implementing DevSecOps and secure CI/CD pipelines.
• Experience working in regulated environments, preferably healthcare.
• Strong knowledge of compliance frameworks such as HIPAA, HITRUST, NIST, and SOC2.
• Strong knowledge, and expertise, in cloud control policies and frameworks.
• Experience working with a variety of executives and their teams in a matrixed environment to deliver value and drive change. Cross-functional experience (e.g., strategy, change management, business process management).
• Industry certifications such as AWS Solutions Architect, AWS Security Specialty, Azure Security Engineer, or CISSP.
• Experience with containerization and orchestration (Docker, Kubernetes).
• Experience with cloud security tools such as CSPM, CWPP, SIEM, and secrets management platforms.
• Strong background in application security and secure coding practices.
• Experience in large-scale enterprise healthcare environments.

Job Level:

Non-Management Exempt

Workshift:

1st Shift (United States of America)

Job Family:

IFT > Engineering/Dev