Title: Application Security & DevSecOps Architect Location: Dublin, Ohio, 43017, United States Department: IT Architecture Full-Time Hybrid Job Description: Medical Mutual employees must submit their applications through MySource. This is a hybrid‑remote role based out of the Dublin, OH office, with employees expected to work onsite on designated in‑office days each week. Founded in 1934, Medical Mutual is the oldest and one of the largest health insurance companies based in Ohio. We provide peace of mind to more than 1.2 million members through our high-quality health, life, disability, dental, vision and indemnity plans. We offer fully insured and self-funded group coverage, including stop loss, as well as Medicare Advantage, Medicare Supplement, and individual plans. The Application Security & DevSecOps Architect will lead the design and implementation of secure application architecture and DevSecOps practices across the enterprise, embed security throughout the software development lifecycle (SDLC) to reduce risk, improve resiliency, and enable scalable, secure software delivery and serve as the primary technical authority for application security, vulnerability management, and DevSecOps pipeline security. We're seeking candidates with these preferred technical skills: - Hands-on experience with application security tooling: - SAST (Snyk, Wiz, Checkmarx, Veracode, Semgrep, SonarQube) - DAST (Qualys, Burp Suite, OWASP ZAP, Invicti) - SCA, IaC scanning, container security tools - Strong knowledge of: - OWASP Top 10, CWE Top 25 - Threat modeling (STRIDE, PASTA, or equivalent) - API security and authentication (OAuth2, OIDC, SAML) - Experience with: - CI/CD platforms (Azure DevOps, GitHub Actions, Jenkins, GitLab) - Cloud security (AWS, Azure) - Containers and orchestration (Docker, Kubernetes) - Working knowledge of secure architecture patterns and Zero Trust principles Architect I Job Summary: Assists in the development of solution options to arrive at better decisions that will reduce IT cost, improve system flows, increase agility, and remove duplicative functionality. Supports the management of risk associated with IT assets through the development and promotion of standards and polices. Expertise may be concentrated in one or more domains. Responsibilities: - Acts as a subject matter expert (SME) to assist various IT areas to support efficiencies in overall design for implementations of new technologies and improvement of existing processes. Advises on best practices and ensures policy and procedure adherence. - Assists in the definition of the current and future state and the transitional plan. Focuses on the incremental improvements that move toward the future state looking for opportunities to streamline environments and remove redundancy. - Collaborates within teams, participates in reviews of all prospective software and hardware acquisitions. Evaluates compatibility with current architecture and supports future architecture roadmaps. Identifies architectural risks and proposes alternatives and solutions. Documents exceptions to architectural standards. - Assists in the review and revisions of new and existing IT standards and policies evaluating their importance. Assists in the development of architectural metrics and reports. - Maintains active awareness of IT industry including new developments, emerging trends, development tools and best practices. - Performs other duties as assigned. Qualifications: Education and Experience: - Bachelor's degree in Computer Science or related field or equivalent combination of training/education and experience. - 3 years proven ability to transfer technology to end user applications/environments. - Experience in cutting edge web collaboration design patterns and best practices Professional Certification(s): - NA Technical Skills and Knowledge: - Expert in one or more technologies (Microsoft, OpenSource, Database (relational, graph, Map, document, etc.). - Basic knowledge in infrastructure and networks with focus on security. - Basic understanding of various project methodology disciplines with basic knowledge of information and systems architectures, highly proficient in website architectures. - Basic understanding of various data base platforms and data warehousing. Architect II Job Summary: Acts in a leadership role that ensures the IT architectural strategy aligns with the overall corporate strategy and is tune with evolving business trends and technology capabilities. Assists in the development of solution options to arrive at better decisions that will reduce IT cost, improve system flows, increase agility, and remove duplicative functionality. Supports the management of risk associated with IT assets through the development and promotion of standards and polices. Expertise may be concentrated in one or more domains. Responsibilities: - Translates overall IT roadmap into actionable processes. Supports the establishment of targeted architecture and develops standards for the organization covering all key domains (Application, Data, and Infrastructure). - Assists in the definition of the current and future state and the transitional plan. Focuses on the incremental improvements that move toward the future state looking for opportunities to streamline environments and remove redundancy. - Collaborates within teams, participates in reviews of all prospective software and hardware acquisitions. Evaluates compatibility with current architecture and supports future architecture roadmaps. Identifies architectural risks and proposes alternatives and solutions. Documents exceptions to architectural standards. - Reviews new and existing IT standards, and architectural plans modifies or creates standards and policies to support the future state. Develops architectural metrics and reports for the executive team, business and IT management. - Maintains active awareness of IT industry including new developments, emerging trends, development tools and best practices - Performs other duties as assigned. Qualifications: Education and Experience: - Bachelor's degree in Computer Science or related field or equivalent combination of training/education and experience. - 5 years proven ability to transfer technology to end user applications/environments. - 2 years of experience influencing technical direction in one of the following: application, data bases, or infrastructure. Professional Certification(s): - NA Technical Skills and Knowledge: - Expert in one or more technologies (Microsoft, OpenSource, Databased (relational, graph, Map, Document). - Experience with suite of IT applications including transactional, middleware integration, workflow, web based. - Solid knowledge in infrastructure and networks with a focus on security. - Solid understanding of various project methodology disciplines with solid knowledge of information and systems architectures, highly proficient in website architectures. - Solid understanding of various data base platforms and data warehousing. - Exposure to EA Framework such as FEAC, TOGAF or DODAF. Architect III Job Summary: Acts in a leadership role that ensures the IT architectural strategy aligns with the overall corporate strategy and is tune with evolving business trends and technology capabilities. Assists in the development of solution options to arrive at better decisions that will reduce IT cost, improve system flows, increase agility, and remove duplicative functionality. Supports the management of risk associated with IT assets through the development and promotion of standards and polices. Expertise may be concentrated in one or more domains. Responsibilities: - Translates overall IT roadmap into actionable processes. Supports the establishment of targeted architecture and develops standards for the organization covering all key domains (Application, Data, and Infrastructure). - Defines the current and future state and the transitional plan. Focuses on the incremental improvements that move toward the future state looking for opportunities to streamline environments and remove redundancy. - Collaborates within teams, participates in reviews of all prospective software and hardware acquisitions. Evaluates compatibility with current architecture and supports future architecture roadmaps. Identifies architectural risks and proposes alternatives and solutions. Documents exceptions to architectural standards. - Review new and existing IT standards, and architectural plans modifies or creates standards and policies to support the future state. develops architectural metrics and reports for the executive team, business and IT management. - Maintain active awareness of IT industry including new developments, emerging trends, development tools and best practices - Performs other duties as assigned. Qualifications: Education and Experience: - Bachelor's degree in Computer Science or related field or equivalent combination of training/education and experience. - 7 years proven ability to transfer technology to end user applications/environments. - 3 years of experience influencing technical direction in one of the following: application, data bases, or infrastructure. Professional Certification(s): - NA Technical Skills and Knowledge: - Expert in one or more technologies (Microsoft, OpenSource, Databased (relational, graph, Map, Document). - Experience with suite of IT applications including transactional, middleware integration, workflow, web based. - Advanced knowledge in infrastructure and networks with a focus on security. - Advanced understanding of various project methodology disciplines with advanced knowledge of information and systems architectures, highly proficient in wesite architectures. - Advanced understanding of various data base platforms and data warehousing. - Exposure to EA Framework such as FEAC, TOGAF or DODAF. Medical Mutual is looking to grow our team! We truly value and respect the talents and abilities of all of our employees. That's why we offer an exceptional package that includes: A Great Place to Work: - We will provide the equipment you need for this role, including a laptop, monitors, keyboard, mouse and headset. - Whether you are working remote or in the office, employees have access to on-site fitness centers at many locations, or a gym membership reimbursement when there is no Medical Mutual facility available. Enjoy the use of weights, cardio machines, locker rooms, classes and more. - On-site cafeteria, serving hot breakfast and lunch, at the Brooklyn, OH headquarters. - Discounts at many places in and around town, just for being a Medical Mutual team member. - The opportunity to earn cash rewards for shopping with our customers. - Business casual attire, including jeans. Excellent Benefits and Compensation: - Employee bonus program. - 401(k) with company match up to 4% and an additional company contribution. - Health Savings Account with a company matching contribution. - Excellent medical, dental, vision, life and disability insurance — insurance is what we do best, and we make affordable coverage for our team a priority. - Access to an Employee Assistance Program, which includes professional counseling, personal and professional coaching, self-help resources and assistance with work/life benefits. - Company holidays and up to 16 PTO days during the first year of employment with options to carry over unused PTO time. - After 120 days of service, parental leave for eligible employees who become parents through maternity, paternity or adoption. An Investment in You: - Career development programs and classes. - Mentoring and coaching to help you advance in your career. - Tuition reimbursement up to $5,250 per year, the IRS maximum. - Diverse, inclusive and welcoming culture with Business Resource Groups. About Medical Mutual: Medical Mutual’s status as a mutual company means we are owned by our policyholders, not stockholders, so we don’t answer to Wall Street analysts or pay dividends to investors. Instead, we focus on developing products and services that allow us to better serve our customers and the communities around us. There’s a good chance you already know many of our Medical Mutual customers. As the official insurer of everything you love, we are trusted by businesses and nonprofit organizations throughout Ohio to provide high-quality health, life, disability, dental, vision and indemnity plans. We offer fully insured and self-funded group coverage, including stop loss, as well as Medicare Advantage, Medicare Supplement and individual plans. Our plans provide peace of mind to more than 1.2 million Ohioans. We’re not just one of the largest health insurance companies based in Ohio, we’re also the longest running. Founded in 1934, we’re proud of our rich history with the communities where we live and work.