> Markdown version of [/jobs/ext/4031884-security-architect](https://www.wearedevelopers.com/jobs/ext/4031884-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Architect - **Company:** Independence, Inc. - **Location:** United States - **Experience:** Expert - **Salary:** $205,805.0 - $267,545.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Application Programming Interfaces (APIs), Artificial Intelligence, Microsoft Azure, VoIP, Cloud Computing, Cloud Computing Security, Cyber Security, Github, Identity and Access Management, Microsoft Software, PCI Data Security Standards, Ping (Networking Utility), OpenAI, Azure Active Directory, Zero Trust Network Access, Azure Machine Learning, Security Information and Event Management, Systems Integration, Software Security, Agentic-AI, Azure Security Center, Customer Identity Access Management, Microsoft Copilot Studio, Azure AI, Data Pipelines, Devsecops, Api Management, Serverless Computing, Static Application Security Testing, Databricks, Microservices, Dynamic Application Security Testing - **Published:** October 30, 2026 - **Apply:** https://startup.jobs/principal-security-domain-architect-pethealth-services-usa-llc-10615864 ## About the Role * Experience with 10+ years as a security Architect. * Strong knowledge of cloud-native security patterns and compliance frameworks * Familiarity with securing AI/ML and agentic workflows * Insurance industry experience is a plus ## Description In close collaboration with the CISO team, this role defines and governs enterprise security architecture for Doubtless (formerly known as Independence Pet Holdings), embedding security into all platforms, applications, and processes. The Security Architect will enable secure adoption of cloud-native services, AI-driven automation, and zero-trust principles across the enterprise, while ensuring compliance with global regulatory frameworks., * Enterprise Security Architecture (30%) + Define and maintain security architecture standards for the enterprise (we are Microsoft technology, Azure-centric, Insurance-focused) + Architect and govern Zero Trust across landing zones; implement unified Conditional Access and identity governance for Internal and external users. + Publish reusable security patterns for multi-tenant and cross-brand scenarios + Oversee security for AKS, API management, and cloud-native infrastructure + Ensure alignment with Calandra Toolkit and Skylark Security Stack for architecture reviews and compliance * Identity & Access Management (20%) + Drive CIAM strategy (Ping vs Microsoft Entra External ID) and support governance for unified identity across all brands + Implement MFA with adaptive logic to reduce friction and cost while mitigating VOIP-based fraud + Integrate IAM for all internal users. * Compliance & Risk Management (10%) + Architect and develop a security controls catalog mapped to PCI-DSS, SOC 2, HIPAA, GDPR/CCPA, NAIC, Quebec Law 25 + Support audits: evidence collection, control mapping, documentation, and posture improvement + Embed KYC, AML, and ABC checks into Skylark workflows; automate OFAC, UK, and EU watchlist checks * Cloud & Application Security (10%) + Define secure patterns for APIs, microservices, and integration pipelines + Implement container security, workload isolation, and encryption standards + Drive DevSecOps adoption (SAST/DAST/Secrets/IaC) and govern GitHub Advanced Security and Azure DevOps integrations * AI/ML & Responsible AI Governance (25%) + Architect security for Azure AI/ML platforms (Azure OpenAI, Copilot Studio, Databricks) + Lead Responsible AI security governance aligned to NIST AI RMF + Secure agentic workflows and Gen-AI integrations * Strategic Leadership & Incident Response (5%) - Support the CISO with: + Develop future-state security architecture roadmap aligned with IPH's digital transformation goals + Retain Tier-2 SOC capabilities in-house for compliance with NYDFS, PCI DSS, and ISO 27001 + Champion security automation and AI-driven threat detection Required Platforms & Tools * Cloud Security: Azure Security Center, Sentinel * IAM/CIAM: Azure AD, Ping Identity * Compliance: SOC 2, PCI DSS, HIPAA, GDPR/CCPA, NAIC, Quebec Law 25 * DevSecOps: GitHub Advanced Security, Azure DevOps * Threat Protection: SIEM (Sentinel), EDR, DLP solutions * AI Security: Azure OpenAI, Databricks, Responsible AI frameworks * Enterprise Standards: Calandra Toolkit (Azure) , Skylark Security Stack (Microsoft)