Skip to content

Open nowPosted today

Principal Security Domain Architect

Independence Pet Holdings32 open roles

Where
Chicago, IL
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowPrincipal Security Domain ArchitectIndependence Pet Holdings · Chicago, IL
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Independence Pet Holdings's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.7% of postings close within 7 days. Measured by our own scanner across the market. Independence Pet Holdings postings stay open a median of 21 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.5%3 days
  3. 12.7%7 days
  4. 20.4%14 days
  5. 35.6%30 days
  6. 58.7%60 days
This job: posted today

Independence Pet Holdings median: 21 days open

The posting

Established in 2021, Independence Pet Holdings is a corporate holding company that manages a diverse and broad portfolio of modern pet health brands and services, including insurance, pet education, lost recovery services, and more throughout North America.

We believe pet insurance is more than a financial product and build solutions to simplify the pet parenting journey and help improve the well-being of pets. As a leading authority in the pet category, we operate with a full stack of resources, capital, and services to support pet parents. Our multi-brand and omni-channel approach include our own insurance carrier, insurance brands and partner brands.

Role Overview

In close collaboration with the CISO team, this role defines and governs enterprise security architecture for Doubtless (formerly known as Independence Pet Holdings), embedding security into all platforms, applications, and processes. The Security Architect will enable secure adoption of cloud-native services, AI-driven automation, and zero-trust principles across the enterprise, while ensuring compliance with global regulatory frameworks.

Key Responsibilities:

  • Enterprise Security Architecture (30%)Define and maintain security architecture standards for the enterprise (we are Microsoft technology, Azure-centric, Insurance-focused) Architect and govern Zero Trust across landing zones; implement unified Conditional Access and identity governance for Internal and external users. Publish reusable security patterns for multi-tenant and cross-brand scenarios Oversee security for AKS, API management, and cloud-native infrastructure Ensure alignment with Calandra Toolkit and Skylark Security Stack for architecture reviews and compliance
  • Identity & Access Management (20%)Drive CIAM strategy (Ping vs Microsoft Entra External ID) and support governance for unified identity across all brands Implement MFA with adaptive logic to reduce friction and cost while mitigating VOIP-based fraud Integrate IAM for all internal users.
  • Compliance & Risk Management (10%)Architect and develop a security controls catalog mapped to PCI-DSS, SOC 2, HIPAA, GDPR/CCPA, NAIC, Quebec Law 25 Support audits: evidence collection, control mapping, documentation, and posture improvement Embed KYC, AML, and ABC checks into Skylark workflows; automate OFAC, UK, and EU watchlist checks
  • Cloud & Application Security (10%)Define secure patterns for APIs, microservices, and integration pipelines Implement container security, workload isolation, and encryption standards Drive DevSecOps adoption (SAST/DAST/Secrets/IaC) and govern GitHub Advanced Security and Azure DevOps integrations
  • AI/ML & Responsible AI Governance (25%)Architect security for Azure AI/ML platforms (Azure OpenAI, Copilot Studio, Databricks) Lead Responsible AI security governance aligned to NIST AI RMF Secure agentic workflows and Gen-AI integrations
  • Strategic Leadership & Incident Response (5%) - Support the CISO with:Develop future-state security architecture roadmap aligned with IPH’s digital transformation goals Retain Tier-2 SOC capabilities in-house for compliance with NYDFS, PCI DSS, and ISO 27001 Champion security automation and AI-driven threat detection

Required Platforms & Tools

  • Cloud Security: Azure Security Center, Sentinel
  • IAM/CIAM: Azure AD, Ping Identity
  • Compliance: SOC 2, PCI DSS, HIPAA, GDPR/CCPA, NAIC, Quebec Law 25
  • DevSecOps: GitHub Advanced Security, Azure DevOps
  • Threat Protection: SIEM (Sentinel), EDR, DLP solutions
  • AI Security: Azure OpenAI, Databricks, Responsible AI frameworks
  • Enterprise Standards: Calandra Toolkit (Azure) , Skylark Security Stack (Microsoft)

Preferred Qualifications

  • Experience with 10+ years as a security Architect.
  • Strong knowledge of cloud-native security patterns and compliance frameworks
  • Familiarity with securing AI/ML and agentic workflows
  • Insurance industry experience is a plus

Compensation:

Chicago Base pay range: $205,805 – $267,545 per year. This is the range we reasonably expect to pay at hire. Placement within the range depends on job-related factors such as experience, skills, and certifications. This position is eligible for an annual bonus. Base pay is one part of a total rewards package that includes the benefits listed below.

#iph

All of our jobs come with great benefits including healthcare, parental leave and opportunities for career advancements. Some offerings are dependent upon the location of where you work and can include the following:

  • Comprehensive full medical, dental and vision Insurance
  • Basic Life Insurance at no cost to the employee
  • Company paid short-term and long-term disability
  • 12 weeks of 100% paid Parental Leave
  • Health Savings Account (HSA)
  • Flexible Spending Accounts (FSA)
  • Retirement savings plan
  • Personal Paid Time Off
  • Paid holidays and company-wide Wellness Day off
  • Paid time off to volunteer at nonprofit organizations
  • Pet friendly office environment
  • Commuter Benefits
  • Group Pet Insurance
  • On the job training and skills development
  • Employee Assistance Program (EAP)

Interview Technology Notice:

Please note that phone and video interviews or screenings may be recorded and transcribed using interview technology to support our recruitment process.

By continuing with the interview, you consent to this use.

Text Messaging Notice:

If you provide a mobile phone number, you may receive job-related communications via text message. Message and data rates may apply.

You may opt out of text communications at any time by replying “STOP.”

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Independence Pet Holdings's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Independence Pet Holdings's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Independence Pet Holdings's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.