(remote in posted locations) The Lead, DevSecOps Architecture builds overarching microservice architectures focused on DevSecOps integration. May assist with security tooling selection, security testing, process automation, and configuration of existing Humana tools, applications, and systems. The Lead, DevSecOps Architecture works on problems of diverse scope and complexity ranging from moderate to substantial.
The Lead, DevSecOps Application Architecture is a senior technical leadership role within the DevSecOps & Engineering organization. This role owns the technical direction, architecture strategy, and roadmap for enterprise DevSecOps application platforms, with a primary focus on secure software engineering, application security posture, developer experience, and CI/CD security orchestration.
The Lead, DevSecOps Application Architecture serves as a technical authority for the DevSecOps Engineering team and partners with Enterprise Information Protection, architecture, engineering, platform, and application development stakeholders to define security requirements and embed security controls into current and future application architectures.
This role requires strong software engineering expertise, architecture leadership, and hands-on experience designing secure, scalable, cloud-native application platforms. The position is not a traditional infrastructure DevOps role; it is a technical leadership and application architecture role focused on secure software platforms, engineering enablement, pipeline integration, and enterprise security automation.
- Bachelor's degree and 8+ years of technical experience, or equivalent experience.
-
4+ years of project leadership, architecture leadership, or technical leadership experience.
-
Strong software engineering background with hands-on experience in application development.
-
Advanced proficiency with .NET / C# application development.
-
Proficiency with Python for automation, scripting, or backend development.
-
Experience designing and leading microservices-based architectures.
-
Deep understanding of Microsoft Azure application services, including one or more of the following:
-
Azure App Services
-
Azure Functions
-
Azure Service Bus
-
Azure storage and data services
-
Experience with API architecture, REST API design, and API gateway patterns, preferably including Apigee.
-
Experience integrating security, quality, or compliance controls into CI/CD pipelines.
-
On-call rotation expectation
-
Hands-on experience with GitHub Actions and/or Azure DevOps.
-
Experience with infrastructure as code, preferably Terraform.
-
Strong knowledge of containerization and orchestration concepts, including Docker and Kubernetes.
-
Experience working with relational and NoSQL databases, preferably PostgreSQL and MongoDB.
-
Understanding of application security principles, secure coding practices, and software supply chain security.
-
Ability to lead architecture discussions, document technical decisions, and influence cross-functional stakeholders.
-
Ability to work independently under minimal supervision and make decisions on complex technical issues.
-
Experience with application security testing tools and practices, including:
-
SAST
-
DAST
-
SCA
-
Open-source dependency scanning
-
Experience with tools such as Checkmarx, AppScan, Cycode, SonarQube, SecAPI, JFrog Artifactory, or Xray.
-
Experience with enterprise secrets and configuration management tools such as HashiCorp Vault and LaunchDarkly.
-
Experience with data engineering or analytics platforms such as:
-
Databricks
-
Azure Data Lake Storage Gen2
-
Enterprise data lake patterns
-
Experience leading platform modernization, technical debt reduction, or legacy system deprecation efforts.
-
Experience designing release gating, deployment controls, or risk-based release readiness platforms.
-
Experience with observability and monitoring platforms such as Splunk and Dynatrace.
-
Experience supporting developer platforms, internal engineering tools, or enterprise application security platforms.
-
Familiarity with developer experience principles and strategies to reduce developer overhead.
-
Experience with clean code practices, pull request standards, pipeline-as-code, and automated quality gates.
-
Technical ownership and accountability
-
Architecture strategy and roadmap development
-
Executive communication and advisory capability
-
Independent judgment and complex decision-making
-
Cross-functional influence and stakeholder management
-
Secure-by-design mindset
-
Developer experience focus
-
Ability to balance security, delivery speed, reliability, and enterprise risk
-
Mentorship and technical coaching
-
Continuous improvement and modernization mindset
Work at Home Requirements: To ensure Home or Hybrid Home/Office employees’ ability to work effectively, the self-provided internet service of Home or Hybrid Home/Office employees must meet the following criteria: At minimum, a download speed of 25 Mbps and an upload speed of 10 Mbps is required; wireless, wired cable or DSL connection is suggested. In certain roles, the minimum recommended internet speed required by Humana may not be sufficient for business needs. Humana reserves the right to require associates to upgrade their internet service if necessary. Work from a dedicated space lacking ongoing interruptions to protect member PHI / HIPAA information.
Travel: While this is a remote position, occasional travel to Humana's offices for training or meetings may be required.
Scheduled Weekly Hours
40
Pay Range
The compensation range below reflects a good faith estimate of starting base pay for full time (40 hours per week) employment at the time of posting. The pay range may be higher or lower based on geographic location and individual pay will vary based on demonstrated job related skills, knowledge, experience, education, certifications, etc.
$142,300 - $195,700 per year
This job is eligible for a bonus incentive plan. This incentive opportunity is based upon company and/or individual performance.
Description of Benefits
Humana, Inc. and its affiliated subsidiaries (collectively, “Humana”) offers competitive benefits that support whole-person well-being. Associate benefits are designed to encourage personal wellness and smart healthcare decisions for you and your family while also knowing your life extends outside of work. Among our benefits, Humana provides medical, dental and vision benefits, 401(k) retirement savings plan, time off (including paid time off, company and personal holidays, paid parental and caregiver leave), short-term and long-term disability, life insurance and many other opportunities.
About Humana: Humana Inc. (NYSE: HUM) is a leading U.S. healthcare company. Through our Humana insurance services and our CenterWell healthcare services, we make it easier for the millions of people we serve to achieve their best health – delivering the care and service they need, when they need it. These efforts are leading to a better quality of life for people with Medicare and Medicaid, families, individuals, military service personnel, and communities at large. Learn more about what we offer at Humana.com and at CenterWell.com.
Equal Opportunity Employer
It is the policy of Humana not to discriminate against any employee or applicant for employment because of race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, genetic information, disability or protected veteran status. It is also the policy of Humana to take affirmative action, in compliance with Section 503 of the Rehabilitation Act and VEVRAA, to employ and to advance in employment individuals with disability or protected veteran status, and to base all employment decisions only on valid job requirements. This policy shall apply to all employment actions, including but not limited to recruitment, hiring, upgrading, promotion, transfer, demotion, layoff, recall, termination, rates of pay or other forms of compensation and selection for training, including apprenticeship, at all levels of employment.
