Distinguished Architect - Security

About the role

We are seeking a highly experienced and technically skilled Distinguished Architect specializing in security to help drive our technology organization's future strategy. This role will require a deep understanding of the application of security to business applications.

Responsibilities

• Define and collaborate on the creation of security roadmaps, security reference architectures, standards, best practice documents, and secure-by-design reference implementations that accelerate delivery while ensuring safety and compliance.
• Evaluate market trends in cybersecurity, execute buy vs. build decisions and assess cost and the risk impact on targeted business outcomes.
• Define future state security architecture that supports secure adoption of Artificial Intelligence, APIs, data stores, cloud infrastructures, cloud services, and microservices.
• Collaborate and consult with technology, cybersecurity, and business partners to optimize business applications and systems that adopt modern and secure architectures, especially around AI.
• Develop and maintain a strategic vision for the secure use of AI technologies, aligned to the CVS Health platform based on key business drivers, regulatory requirements, and emerging threat trends.
• Define and collaborate on the creation of security frameworks for the enterprise that promote reuse, reduce cost, manage risk, and increase speed to market.
• Effectively build and maintain strong relationships with technology, cybersecurity, and business partners to establish trust and influence key security decisions.
• Provide guidance, direction and mentorship to engineers and other stakeholders regarding security architecture and secure design of enterprise applications.
• Ensure all Non-Functional Security Requirements (e.g., authentication, authorization, resilience, encryption, auditability, availability, etc.) are properly articulated, and work with all parties to guarantee that delivered software products meet these objectives.
• Participates in high-level security estimation and security evaluation of AI-enabled solutions.
• Mentor and coach junior architects and seek the opportunity to bring continuous improvement in secure engineering and enterprise security practices.
• Strategize and outline long-term security architectural plans for a complex technology environment.

Requirements

• 15+ years of relevant work experience (10+ years in technical security leadership roles)
• 10+ years of experience building or securing large-scale business applications using modern technologies and architectural patterns.
• 10+ years of experience designing secure integrations with a focus on performance, resilience, and loose coupling using APIs, microservices, and event-driven architecture.
• Evidence of significant contributions in previous roles and/or to the broader industry.
• Expert-level understanding of security architectural methodologies/best practices, regulatory and compliance requirements, and risk frameworks that influence architecture decisions.
• Recognized technical leader with full stack technology knowledge and recognized as an expert in multiple security domains such as: Identity & access management (IAM), network security, cloud security (AWS/Azure/GCP), data protection, zero trust, or security operations.
• Substantial experience with requirements analysis, risk assessment, estimation, and secure application design.
• Expert understanding of architectural governance, security design patterns, AI safety controls, secure development standards, and best practices.
• Diverse technical background with key areas of depth around AI/ML/Agentic AI security, cloud security, data platform security, hybrid solutions and operating securely at scale.
• Excellent collaboration, influencing, negotiation, coaching and coalition-building skills.

Qualifications

• Experience developing security architecture using agile methodology.
• Experience in AI security architecture and practical application of AI technologies.
• Experience with the concepts and practical application of AI security, and the future of secure autonomous systems.
• A self-starter that is naturally inquisitive and proactive in identifying threats and emerging risks.
• Infrastructure experience and expertise (e.g. private/public cloud).
• Master’s or PhD. degree.
• Bachelor’s degree in computer science or related field.

Pay

The typical pay range for this role is $175,100.00 - $334,750.00. This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company’s equity award program.