Senior Principal Cloud Security Architect

We anticipate the application window for this opening will close on 3 Jun 2026. At MiniMed, you can begin a lifelong career of exploration and innovation, while helping make a difference in the lives of people living with diabetes around the globe. You'll lead with purpose, breaking down barriers to innovation for a more connected, compassionate world. About the Role The Senior Principal Cloud Security Architect is the single‑threaded owner of cloud security architecture, standards, and control design across cloud environments, with a primary focus on AWS and support for Azure and Google Cloud Platform (GCP). This role defines and enforces security guardrails, reference architectures, and control frameworks that ensure cloud platforms are secure‑by‑default, auditable, and aligned with regulatory and enterprise risk requirements. It is a control‑plane role, not an operational security role. The architect owns what secure looks like and ensures those standards are implemented through Platform Engineering and enforced through automation and governance mechanisms. The role partners closely with Cloud Platform Engineering, Cloud Operations, and Cybersecurity to drive consistent, scalable, and enforceable security across all cloud environments. Responsibilities Security Architecture & Standards – Define and own cloud security architecture and standards across AWS, with aligned patterns for Azure and GCP. Establish secure‑by‑default reference architectures covering identity, network segmentation, encryption, logging, and workload isolation. Develop and maintain security guardrails, patterns, and blueprints through platform services. Governance, Controls & Enforcement – Define security control frameworks and ensure alignment with regulatory, audit, and enterprise risk requirements. Partner with Platform Engineering to implement controls as policy‑as‑code, guardrails, and automated enforcement mechanisms. Establish and govern exception processes. Identity & Access Architecture – Define identity and access management standards including role design, least privilege access, federation, and service‑to‑service authentication. Ensure consistent identity patterns across AWS, Azure, and GCP aligned to enterprise identity providers and zero‑trust principles. Network & Data Security Architecture – Define network segmentation, traffic inspection, and secure connectivity patterns. Establish standards for data protection, including encryption, key management, data classification, and data residency controls. Observability, Detection & Response Enablement – Define requirements for logging, monitoring, and detection across cloud platforms. Ensure detection capabilities are actionable and aligned with incident response processes. Platform & Product Enablement – Translate security standards into reusable platform capabilities and default configurations. Embed controls into account provisioning, infrastructure templates, and CI/CD pipelines. Risk, Audit & Compliance Support – Provide clear documentation and evidence of control design and enforcement. Support audits, regulatory reviews, and control assessments. Required Knowledge and Experience Requires 10+ years of experience with a bachelor’s degree or 8+ years of experience with an advanced degree or 12+ years of experience with a high school diploma or equivalent. Preferred Experience 10+ years of experience in cloud security, cloud architecture, or cybersecurity engineering roles. Deep expertise in AWS security architecture, with working knowledge of Azure and/or GCP security models. Strong understanding of identity and access management, network security, encryption, and cloud‑native security services. Experience designing and implementing security controls in infrastructure‑as‑code and policy‑as‑code frameworks. Proven ability to define and enforce security standards across large‑scale, multi‑account or multi‑project environments. Experience operating in regulated or audit‑heavy environments. Experience with cloud security posture management (CSPM) platforms and automated control enforcement. Familiarity with enterprise identity systems (e.g., federated identity, SSO, IGA platforms). Experience supporting multi‑cloud or hybrid cloud environments. Knowledge of compliance frameworks (e.g., HIPAA, SOC 2, ISO 27001) and their application in cloud environments. Relevant certifications such as AWS Security Specialty, Certified Cloud Security Professional (CCSP), or equivalent. Benefits & Compensation The base salary range is $141,600.00 – $212,400.00 USD for U.S. locations (excl. Puerto Rico), variable based on experience, certification, market conditions, and location. The position is eligible for a short‑term incentive called the Short Term Incentive (STI). Employees working 20 or more hours per week enjoy health, dental, and vision insurance, a Health Savings Account, a Healthcare Flexible Spending Account, life insurance, long‑term disability leave, a dependent daycare spending account, a 401(k) plan with company match, short‑term and long‑term disability coverage, paid time off, holidays, and participation in the Employee Stock Purchase Plan, among others. Equal Employment Opportunity It is the policy of MiniMed to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state, or local law. MiniMed will provide reasonable accommodations for qualified individuals with disabilities. Physical & Work Requirements Physical requirements include independent mobile work and computer interaction. Reasonable accommodations may be made to enable individuals with disabilities. Application Status The application window closes on 3 Jun 2026. Please apply before this date to be considered for the position. #J-18808-Ljbffr USA-Medtronic MiniMed, Inc 1017