Principal Engineer - Digital

We're building a world of health around every individual - shaping a more connected, convenient and compassionate health experience. At CVS Health®, you'll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger - helping to simplify health care one person, one family and one community at a time.

CVS Health is looking for a Principal Engineer - Digital to serve as one of the most impactful individual contributors in the organization. This is a role for someone who can see, shape, and set the technical direction of our entire digital ecosystem. You will be part of the team that has the technical authority across mobile (iOS & Android), web, cloud infrastructure, AI/ML platforms, backend systems, security, developer tooling, and agentic AI.

You will define architectural standards, evaluate emerging technologies, mentor senior engineers, and make the high-stakes technical decisions that no single product team can own alone. If you thrive at the intersection of systems thinking, deep technical craft, and organizational influence - and want your work to touch the health of tens of millions of Americans every day - this is the role for you.

• Define and own the end-to-end digital architecture strategy, ensuring coherence and consistency across mobile, web, cloud, and AI surfaces
• Author and steward Architecture Decision Records that guide engineering decisions across multiple teams and domains
• Evaluate and validate major architectural choices - service boundaries, data models, API contracts, and infrastructure patterns - before they become expensive to change
• Identify and eliminate architectural debt proactively, balancing short-term delivery pressure with long-term platform health
• Establish and enforce engineering standards, design principles, and best practices across the full digital portfolio
• Drive technology radar decisions - selecting, adopting, and deprecating frameworks, tools, and platforms across the organization
• Define web architecture standards including application framework selection, rendering strategy (SSR, CSR, ISR), and micro-frontend approaches where appropriate
• Lead performance engineering for web:
  Core Web Vitals targets, bundle optimization, lazy loading strategy, and CDN/edge caching architecture
• Govern third-party script strategy to protect page performance, user privacy, and security

• Define the organization's AI architecture strategy across the full spectrum - foundational model selection, inference infrastructure, vector databases, embedding pipelines, and responsible AI design patterns
• Ability to build and strategize AI systems to be consumed for Mobile apps/Web and the personalization, recommendations using the data analysis and AI/ML tools
• Lead agentic AI system design using orchestration frameworks (Lang Chain, Lang Graph, Auto Gen, or equivalent), including agent loop design, tool use, memory, and guardrails
• Ensure all AI systems meet explainability, fairness, and compliance requirements - particularly in a regulated healthcare context.
• Identify AI solutioning opportunities across the digital product portfolio and drive proof-of-concepts through to production-grade implementation.

• Architect scalable, resilient cloud infrastructure - including compute, storage, networking, and managed services strategy
• Define backend service architecture: microservices decomposition, event-driven systems, API gateway patterns, and service mesh configuration
• Lead platform engineering efforts: developer portals, internal tooling, shared libraries, and golden-path templates that accelerate every product team
• Design and govern data architecture decisions: databases at scale, caching layers (Redis, CDN) and streaming pipelines
• Establish SLO/SLA frameworks, error budget policies, and on-call standards that balance reliability with engineering velocity

• Lead digital security architecture: zero-trust network design, identity and access management, secrets management, and service-to-service authentication
• Lead threat modeling exercises for major platform changes, surfacing and mitigating risks before they reach production
• Define and enforce SAST, DAST, SCA, and container scanning standards across all CI/CD pipelines
• Own compliance architecture for HIPAA, SOC 2 Type II, and PCI-DSS as applicable - translating regulatory requirements into concrete technical controls
• Partner with the security team on vulnerability response, penetration testing remediation, and incident response planning
• Drive a security-by-default engineering culture through tooling, training, and code review standards

• Provide technical mentorship and coaching to senior and staff engineers - elevating the…