Senior Cloud Security Architect

About the role

Become a part of our caring community

The Senior Cloud Security Architect serves as the senior technical expert for enterprise endpoint security capabilities within the Countermeasures organization. This role evaluates, designs, and advances technologies that protect Windows and macOS workstations and servers through modern endpoint protection, detection and response, device security, and secure remote access capabilities.

Partnering across Security Operations, Infrastructure, Identity, Cloud, Engineering, and Security Architecture teams, this position provides technical leadership, evaluates emerging technologies, and drives improvements that strengthen the organization's endpoint security posture.

Endpoint Security

• Serve as the subject matter expert for enterprise endpoint security capabilities.
• Design and evaluate solutions supporting Windows and macOS endpoint security.
• Provide technical guidance for projects and initiatives impacting endpoint security technologies.
• Partner with engineering and operational teams to improve endpoint security effectiveness and resilience.
• Serve as the endpoint security subject matter expert for the development, maintenance, and periodic review of endpoint security policies, standards, and technical requirements.

Endpoint Protection & Detection

• Provide technical leadership across EDR, XDR, endpoint hardening, threat prevention, device control, and privileged access controls.
• Recommend improvements to prevention, detection, investigation, containment, and response capabilities.
• Collaborate with Security Operations to improve endpoint visibility and threat detection outcomes.

Zero Trust & Secure Remote Access

• Support Zero Trust initiatives through endpoint trust and device security controls.
• Provide technical guidance for Zero Trust Network Access (ZTNA), secure remote access, and device posture validation capabilities.
• Partner with Identity and Access Management teams to support conditional access and adaptive access controls.

Risk & Technology Evaluation

• Participate in security reviews, threat modeling, and control assessments related to endpoint security technologies.
• Identify security gaps and recommend mitigation strategies.
• Contribute endpoint security expertise to governance, risk, and compliance activities.
• Lead proof-of-concept efforts and technical evaluations, and recommend technologies for adoption and optimization.

Required Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Technology, or a related field; equivalent experience may be considered.
• 6+ years in cybersecurity, endpoint security, infrastructure security, or a related technical discipline, including experience designing or supporting enterprise endpoint security capabilities.
• 2+ years in security architecture, security engineering, or technical design leadership.
• Strong AI fluency with the ability to identify, prioritize, and drive AI-related opportunities that deliver measurable value for engineering, security, or developer experience teams.
• Experience securing Windows workstations, Windows servers, and macOS environments.
• Experience with endpoint protection capabilities, including Endpoint Detection and Response (EDR) and/or Extended Detection and Response (XDR).
• Working knowledge of endpoint management, Mobile Device Management (MDM), and Mobile Application Management (MAM) capabilities and their integration with endpoint security controls.
• Experience supporting Zero Trust initiatives, including device trust, security posture validation, conditional access, and adaptive access controls.
• Experience with Zero Trust Network Access (ZTNA) and modern secure remote access technologies.
• Experience evaluating security technologies and developing technical recommendations.
• Knowledge of endpoint attack techniques, threat detection, incident response, and security monitoring practices.
• Ability to lead technical discussions and communicate effectively with technical and business stakeholders.

Preferred Qualifications

• Experience integrating endpoint security telemetry with security monitoring, analytics, orchestration, or incident response platforms.
• Experience supporting cloud-hosted and hybrid environments.
• Experience with technology evaluations, proof-of-concept efforts, and security capability assessments.
• Familiarity with industry security frameworks and Zero Trust principles.
• CISSP, CCSP, or equivalent industry certification preferred.

Success Factors

• Balances security, operational, and business requirements when guiding decisions.
• Collaborates effectively across security, infrastructure, cloud, engineering, identity, and architecture teams.
• Influences technical direction and drives continuous improvement without direct authority.
• Advances the organization's ability to prevent, detect, investigate, and respond to endpoint threats.

• Scheduled Weekly Hours
• 40

Pay Range

The compensation range below reflects a good faith estimate of starting base pay for full time (40 hours per week) employment at the time of posting. The pay range may be higher or lower based on geographic location and individual pay will vary based on demonstrated job related skills, knowledge, experience, education, certifications, etc.

$117,600 - $161,700 per year

This job is eligible for a bonus incentive plan. This incentive opportunity is based upon company and/or individual performance.

Description of Benefits

Humana, Inc. and its affiliated subsidiaries (collectively, "Humana") offers competitive benefits that support whole-person well-being. Associate benefits are designed to encourage personal wellness and smart healthcare decisions for you and your family while also knowing your life extends outside of work. Among our benefits, Humana provides medical, dental and vision benefits, 401(k) retirement savings plan, time off (including paid time off, company and personal holidays, paid parental and caregiver leave), short-term and long-term disability, life insurance and many other opportunities.