Distinguished Architect - Security

Distinguished Architect – Security

We are seeking a highly experienced and technically skilled Distinguished Architect specializing in security to help drive our technology organization's future strategy. This role will require a deep understanding of the application of security to business applications. The successful candidate will be responsible for architecting security reference architectures that meet the needs of the broader technology organization.

• Possesses significant (IC) leadership experience and has driven large technical initiatives across an enterprise in an influencing role.
• Is deeply passionate about security with significant (deep and broad) experience in these areas.
• Can dive deep into the details of how secure solutions but also can communicate a broader vision.
• Has worked in a broad architecture role in a large enterprise with a very complex technology landscape.
• Builds strong relationships and is highly collaborative with others.

• Be part of a team responsible for enabling secure technology solutions that meets our business strategy and drives business value.
• Define and collaborate on the creation of security roadmaps, security reference architectures, standards, best practice documents, and secure-by-design reference implementations that accelerate delivery while ensuring safety and compliance.
• Evaluate market trends in cybersecurity, execute buy vs. build decisions and assess cost and the risk impact on targeted business outcomes.
• Define future state security architecture that supports secure adoption of Artificial Intelligence, APIs, data stores, cloud infrastructures, cloud services, and microservices.
• Collaborate and consult with technology, cybersecurity, and business partners to optimize business applications and systems that adopt modern and secure architectures, especially around AI.
• Develop and maintain a strategic vision for the secure use of AI technologies, aligned to the CVS Health platform based on key business drivers, regulatory requirements, and emerging threat trends.
• Define and collaborate on the creation of security frameworks for the enterprise that promote reuse, reduces cost, manages risk, and increases speed to market.
• Effectively build and maintain strong relationships with technology, cybersecurity, and business partners to establish trust and influence key security decisions.
• Provide guidance, direction and mentorship to engineers and other stakeholders regarding security architecture and secure design of enterprise applications.
• Ensure all Non-Functional Security Requirements (e.g., authentication, authorization, resilience, encryption, auditability, availability, etc.) are properly articulated, and work with all parties to guarantee that delivered software products meet these objectives.
• Participates in high‑level security estimation and security evaluation of AI‑enabled solutions.
• Mentor and coach junior architects and seek the opportunity to bring continuous improvement in secure engineering and enterprise security practices.
• Strategize and outline long‑term security architectural plans for a complex technology environment.

• 15+ years of relevant work experience (10+ years in technical security leadership roles)
• 10+ years of experience building or securing large‑scale business applications using modern technologies and architectural patterns.
• 10+ years of experience designing secure integrations with a focus on performance, resilience, and loose coupling using APIs, microservices, and event‑driven architecture.
• Evidence of significant contributions in previous roles and/or to the broader industry.
• Expert‑level understanding of security architectural methodologies/best practices, regulatory and compliance requirements, and risk frameworks that influence architecture decisions.
• Recognized technical leader with full stack technology knowledge and recognized as an expert in multiple security domains such as:
  Identity & access management (IAM), network security, cloud security (AWS/Azure/GCP), data protection, zero trust, or security operations.
• Experience recognizing the impact…