Director, Security Architecture

At Zelis, we Get Stuff Done. So, let’s get to itA Little

About Us
Zelis is modernizing the healthcare financial experience across payers, providers, and healthcare consumers. We serve more than 750 payers, including the top five national health plans, regional health plans, TPAs and millions of healthcare providers and consumers across our platform of solutions. Zelis sees across the system to identify, optimize, and solve problems holistically with technology built by healthcare experts – driving real, measurable results for clients.
At Zelis, AI is woven into the fabric of how we work. Every associate is expected
- and empowered
- to partner with AI to challenge the status quo, accelerate innovation, and amplify their impact. This is a place for builders with a growth mindset who act with agility, embrace change, and use modern technology to shape smarter solutions, exceptional experiences, and the future of our industry for our clients, customers, and our culture.
A Little About YouYou bring a unique blend of personality and professional expertise to your work, inspiring others with your passion and dedication. Your career is a testament to your diverse experiences, community involvement, and the valuable lessons you've learned along the way. You are more than just your resume; you are a reflection of your achievements, the knowledge you've gained, and the personal interests that shape who you are.
Position OverviewThe Director of Security Architecture and Security Services sets the technical direction for the organization's security technology stack and the security guardrails that shape cloud adoption and application modernization. This leader partners with Technology, Engineering, and Infrastructure teams to ensure security tooling (EDR, DLP, and others) is selected, integrated, and evolved deliberately. They also make sure security is built into the way the business moves to the cloud and modernizes its applications.
This is a hands-on, strategic leadership role requiring a strong blend of technical expertise, business acumen, and influence. The ideal candidate will serve as a trusted technical advisor, partnering with engineering, product, and business leaders to translate security and technology risks into practical, scalable design and implementation decisions. In this role, the individual will be responsible for executing the following

key responsibilities
Security Technology Strategy and AdvisoryAdvise Technology leadership on the security tool stack, including endpoint detection and response (EDR), data loss prevention (DLP), identity and access management, email security, vulnerability management, SIEM/SOAR, and related platforms.
Own the security technology roadmap and reference architecture, balancing coverage, integration, cost, and operational complexity.
Lead vendor evaluations, proof-of-concept efforts, and build-vs-buy recommendations.
Identify tooling gaps, overlaps, and consolidation opportunities, and make the business case for investment or rationalization.
Cloud Strategy and Application Modernization GuardrailsPartner with Cloud, Platform, and Engineering teams to define and recommend security guardrails for cloud adoption (multi-cloud or single-cloud), including landing zone design, network segmentation, identity, encryption, logging, and configuration standards.
Embed security into application modernization efforts such as containerization, microservices, API strategy, serverless, and CI/CD pipelines.
Establish patterns that allow teams to move fast safely: secure-by-default templates, policy-as-code, and paved-road architectures.
Review and advise on architecture for high-impact initiatives, providing risk-based guidance rather than acting as a gatekeeper.
Architecture Governance and RiskDefine, publish, and maintain security architecture principles, standards, and reference patterns.
Run the architecture review process, with clear criteria for when reviews are required and a focus on timely, actionable feedback.
Translate threat models, regulatory requirements, and risk assessments into architectural requirements.
Communicate architectural risks and tradeoffs clearly to technical and executive audiences, including the CISO and CIO.
Leadership and CollaborationBuild, lead, and develop a team of security architects.
Serve as a trusted partner to CTO/CIO organizations, Engineering, Infrastructure, Data, and Compliance stakeholders.
Collaborate with Security Operations, GRC, and Incident Response to ensure architecture supports detection, response, and audit readiness.
Represent security architecture in steering committees, design authorities, and executive forums.
QualificationsRequired12+ years of experience in information security, with 5+ years in security architecture and 3+ years in a leadership role.
Deep, hands-on knowledge of enterprise security technologies, including EDR/XDR, DLP, IAM/PAM, SIEM, CASB/SSE, and network and cloud security controls.
Strong experience with cloud security in at