Lead, DevSecOps Application Architecture

• Technical ownership and accountability
• Architecture strategy and roadmap development
• Executive communication and advisory capability
• Independent judgment and complex decision-making
• Cross-functional influence and stakeholder management
• Secure-by-design mindset
• Developer experience focus
• Ability to balance security, delivery speed, reliability, and enterprise risk
• Mentorship and technical coaching
• Continuous improvement and modernization mindset

Work at Home Requirements: To ensure Home or Hybrid Home/Office employees’ ability to work effectively, the self-provided internet service of Home or Hybrid Home/Office employees must meet the following criteria: At minimum, a download speed of 25 Mbps and an upload speed of 10 Mbps is required; wireless, wired cable or DSL connection is suggested. In certain roles, the minimum recommended internet speed required by Humana may not be sufficient for business needs. Humana reserves the right to require associates to upgrade their internet service if necessary. Work from a dedicated space lacking ongoing interruptions to protect member PHI / HIPAA information.

Travel: While this is a remote position, occasional travel to Humana's offices for training or meetings may be required.

• Experience with application security testing tools and practices, including:
• SAST
• DAST
• SCA
• Open-source dependency scanning
• Experience with tools such as Checkmarx, AppScan, Cycode, SonarQube, SecAPI, JFrog Artifactory, or Xray.
• Experience with enterprise secrets and configuration management tools such as HashiCorp Vault and LaunchDarkly.
• Experience with data engineering or analytics platforms such as:
• Databricks
• Azure Data Lake Storage Gen2
• Enterprise data lake patterns
• Experience leading platform modernization, technical debt reduction, or legacy system deprecation efforts.
• Experience designing release gating, deployment controls, or risk-based release readiness platforms.
• Experience with observability and monitoring platforms such as Splunk and Dynatrace.
• Experience supporting developer platforms, internal engineering tools, or enterprise application security platforms.
• Familiarity with developer experience principles and strategies to reduce developer overhead.
• Experience with clean code practices, pull request standards, pipeline-as-code, and automated quality gates.

The compensation range below reflects a good faith estimate of starting base pay for full time (40 hours per week) employment at the time of posting. The pay range may be higher or lower based on geographic location and individual pay will vary based on demonstrated job related skills, knowledge, experience, education, certifications, etc.

$142,300 - $195,700 per year

This job is eligible for a bonus incentive plan. This incentive opportunity is based upon company and/or individual performance.

Humana, Inc. and its affiliated subsidiaries (collectively, “Humana”) offers competitive benefits that support whole-person well-being. Associate benefits are designed to encourage personal wellness and smart healthcare decisions for you and your family while also knowing your life extends outside of work. Among our benefits, Humana provides medical, dental and vision benefits, 401(k) retirement savings plan, time off (including paid time off, company and personal holidays, paid parental and caregiver leave), short-term and long-term disability, life insurance and many other opportunities.

(remote in posted locations) The Lead, DevSecOps Architecture builds overarching microservice architectures focused on DevSecOps integration. May assist with security tooling selection, security testing, process automation, and configuration of existing Humana tools, applications, and systems. The Lead, DevSecOps Architecture works on problems of diverse scope and complexity ranging from moderate to substantial.

The Lead, DevSecOps Application Architecture is a senior technical leadership role within the DevSecOps & Engineering organization. This role owns the technical direction, architecture strategy, and roadmap for enterprise DevSecOps application platforms, with a primary focus on secure software engineering, application security posture, developer experience, and CI/CD security orchestration.

The Lead, DevSecOps Application Architecture serves as a technical authority for the DevSecOps Engineering team and partners with Enterprise Information Protection, architecture, engineering, platform, and application development stakeholders to define security requirements and embed security controls into current and future application architectures.

This role requires strong software engineering expertise, architecture leadership, and hands-on experience designing secure, scalable, cloud-native application platforms. The position is not a traditional infrastructure DevOps role; it is a technical leadership and application architecture role focused on secure software platforms, engineering enablement, pipeline integration, and enterprise security automation.

• Bachelor's degree and 8+ years of technical experience, or equivalent experience.
• 4+ years of project leadership, architecture leadership, or technical leadership experience.
• Strong software engineering background with hands-on experience in application development.
• Advanced proficiency with .NET / C# application development.
• Proficiency with Python for automation, scripting, or backend development.
• Experience designing and leading microservices-based architectures.
• Deep understanding of Microsoft Azure application services, including one or more of the following:
• Azure App Services
• Azure Functions
• Azure Service Bus
• Azure storage and data services
• Experience with API architecture, REST API design, and API gateway patterns, preferably including Apigee.
• Experience integrating security, quality, or compliance controls into CI/CD pipelines.
• On-call rotation expectation
• Hands-on experience with GitHub Actions and/or Azure DevOps.
• Experience with infrastructure as code, preferably Terraform.
• Strong knowledge of containerization and orchestration concepts, including Docker and Kubernetes.
• Experience working with relational and NoSQL databases, preferably PostgreSQL and MongoDB.
• Understanding of application security principles, secure coding practices, and software supply chain security.
• Ability to lead architecture discussions, document technical decisions, and influence cross-functional stakeholders.
• Ability to work independently under minimal supervision and make decisions on complex technical issues.

About Humana: Humana Inc. (NYSE: HUM) is a leading U.S. healthcare company. Through our Humana insurance services and our CenterWell healthcare services, we make it easier for the millions of people we serve to achieve their best health – delivering the care and service they need, when they need it. These efforts are leading to a better quality of life for people with Medicare and Medicaid, families, individuals, military service personnel, and communities at large. Learn more about what we offer at Humana.com and at CenterWell.com.