Application Security & DevSecOps Architect

Application Security & Devsecops ArchitectMedical Mutual employees must submit their applications through MySource.This is a hybrid-remote role based out of the Dublin, OH office, with employees expected to work onsite on designated in-office days each week.Founded in 1934, Medical Mutual is the oldest and one of the largest health insurance companies based in Ohio. We provide peace of mind to more than 1.2 million members through our high-quality health, life, disability, dental, vision and indemnity plans. We offer fully insured and self-funded group coverage, including stop loss, as well as Medicare Advantage, Medicare Supplement, and individual plans.The Application Security & DevSecOps Architect will lead the design and implementation of secure application architecture and DevSecOps practices across the enterprise, embed security throughout the software development lifecycle (SDLC) to reduce risk, improve resiliency, and enable scalable, secure software delivery and serve as the primary technical authority for application security, vulnerability management, and DevSecOps pipeline security.We're seeking candidates with these preferred technical skills:Hands-on experience with application security tooling:SAST (Snyk, Wiz, Checkmarx, Veracode, Semgrep, SonarQube)DAST (Qualys, Burp Suite, OWASP ZAP, Invicti)SCA, IaC scanning, container security toolsStrong knowledge of:OWASP Top 10, CWE Top 25Threat modeling (STRIDE, PASTA, or equivalent)API security and authentication (OAuth2, OIDC, SAML)Experience with:CI/CD platforms (Azure DevOps, GitHub Actions, Jenkins, GitLab)Cloud security (AWS, Azure)Containers and orchestration (Docker, Kubernetes)Working knowledge of secure architecture patterns and Zero Trust principlesArchitect IJob Summary:Assists in the development of solution options to arrive at better decisions that will reduce IT cost, improve system flows, increase agility, and remove duplicative functionality. Supports the management of risk associated with IT assets through the development and promotion of standards and policies. Expertise may be concentrated in one or more domains.Responsibilities:Acts as a subject matter expert (SME) to assist various IT areas to support efficiencies in overall design for implementations of new technologies and improvement of existing processes. Advises on best practices and ensures policy and procedure adherence.Assists in the definition of the current and future state and the transitional plan. Focuses on the incremental improvements that move toward the future state looking for opportunities to streamline environments and remove redundancy.Collaborates within teams, participates in reviews of all prospective software and hardware acquisitions. Evaluates compatibility with current architecture and supports future architecture roadmaps.

Identifies architectural risks and proposes alternatives and solutions. Documents exceptions to architectural standards.Assists in the review and revisions of new and existing IT standards and policies evaluating their importance. Assists in the development of architectural metrics and reports.Maintains active awareness of IT industry including new developments, emerging trends, development tools and best practices.Performs other duties as assigned.Qualifications:Education and Experience:Bachelor's degree in Computer Science or related field or equivalent combination of training/education and experience.3 years proven ability to transfer technology to end user applications/environments.Experience in cutting edge web collaboration design patterns and best practicesProfessional Certification(s): NATechnical Skills and Knowledge:Expert in one or more technologies (Microsoft, OpenSource, Database (relational, graph, Map, document, etc.).Basic knowledge in infrastructure and networks with focus on security.Basic understanding of various project methodology disciplines with basic knowledge of information and systems architectures, highly proficient in website architectures.Basic understanding of various data base platforms and data warehousing.Architect IIJob Summary:Acts in a leadership role that ensures the IT architectural strategy aligns with the overall corporate strategy and is tune with evolving business trends and technology capabilities. Assists in the development of solution options to arrive at better decisions that will reduce IT cost, improve system flows, increase agility, and remove duplicative functionality. Supports the management of risk associated with IT assets through the development and promotion of standards and polices. Expertise may be concentrated in one or more domains.Responsibilities:Translates overall IT roadmap into actionable processes. Supports the establishment of targeted architecture and develops standards for the organization covering all key domains (Application, Data, and Infrastructure).Assists in the definition of the current and future state and the transitional plan. Focuses on the incremental improvements that move toward the future state looking for opportunities to streamline environments and remove redundancy.Collaborates within teams, participates in reviews of all prospective software and hardware acquisitions.

Evaluates compatibility with current architecture and supports future architecture roadmaps. Identifies architectural risks and proposes alternatives and solutions. Documents exceptions to architectural standards.Reviews new and existing IT standards, and architectural plans modifies or creates standards and policies to support the future state. Develops architectural metrics and reports for the executive team, business and IT management.Maintains active awareness of IT industry including new developments, emerging trends, development tools and best practicesPerforms other duties as assigned.Qualifications:Education and Experience:Bachelor's degree in Computer Science or related field or equivalent combination of training/education and experience.5 years proven ability to transfer technology to end user applications/environments.2 years of experience influencing technical direction in one of the following: application, data bases, or infrastructure.Professional Certification(s): NATechnical Skills and Knowledge:Expert in one or more technologies (Microsoft, OpenSource, Databased (relational, graph, Map, Document).Experience with suite of IT applications including transactional, middleware integration, workflow, web based.Solid knowledge in infrastructure and networks with a focus on security.Solid understanding of various project methodology disciplines with solid knowledge of information and systems architectures, highly proficient in website architectures.Solid understanding of various data base platforms and data warehousing.Exposure to EA Framework such as FEAC, TOGAF or DODAF.Architect IIIJob Summary:Acts in a leadership role that ensures the IT architectural strategy aligns with the overall corporate strategy and is tune with evolving business trends and technology capabilities. Assists in the development of solution options to arrive at better decisions that will reduce IT cost, improve system flows, increase agility, and remove duplicative functionality. Supports the management of risk associated with IT assets through the development and promotion of standards and polices. Expertise may be concentrated in one or more domains.Responsibilities:Translates overall IT roadmap into actionable processes. Supports the establishment of targeted architecture and develops standards for the organization covering all key domains (Application, Data, and Infrastructure).Defines the current and future state and the transitional plan.

Focuses on the incremental improvements that move toward the future state looking for opportunities to streamline environments and remove redundancy.Collaborates within teams, participates in reviews of all prospective software and hardware acquisitions. Evaluates compatibility with current architecture and supports future architecture roadmaps. Identifies architectural risks and proposes alternatives and solutions. Documents exceptions to architectural standards.Review new and existing IT standards, and architectural plans modifies or creates standards and policies to support the future state. develops architectural metrics and reports for the executive team, business and IT management.Maintain active awareness of IT industry including new developments, emerging trends, development tools and best practicesPerforms other duties as assigned.Qualifications:Education and Experience: