Principal Security Architect

Insulet Corporation

. Define and evolve security architecture across the insulin pump, iOS and Android mobile apps, CGM integrations, and cloud services .

Posted 10/23/2026full-timeUnited StatesLead💰 $196,500 - $294,750 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security architecture for connected medical devices, including PKI design, cryptographic key lifecycle management, and identity architecture across mobile apps and cloud services. Proficient in regulatory compliance with HIPAA and FDA standards, along with strong communication skills for collaboration with cross-functional teams.

Highest-signal resume keywords

Security Architecture DesignPKI and Cryptographic Key ManagementBluetooth Low Energy SecurityHIPAA ComplianceMentoring Senior Engineers

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security ArchitecturePKI DesignCryptographic Key Lifecycle ManagementIdentity ArchitectureBluetooth Low Energy SecurityEmbedded Software SecurityThreat ModelingVulnerability DetectionRisk AssessmentData Protection

Soft Skills

Clear CommunicationCollaborationMentoring

Tools & Technologies

IOS DevelopmentAndroid DevelopmentCloud ServicesSecure BootSigned Firmware UpdatesThird-Party BLE Sensors

Certifications & Qualifications

CISSP

Industry Keywords

HIPAAFDA CybersecurityConnected Medical DevicesIEC 62304ISO 14971

Tech Stack

Tools & technologies

AndroidCloudCyber SecurityiOS

About the role

Key responsibilities & impact

Define and evolve security architecture across the insulin pump, iOS and Android mobile apps, CGM integrations, and cloud services
Design and govern PKI, including certificate hierarchies, device and service identity, provisioning, rotation, revocation, and secure key storage
Set cryptographic approaches for therapy commands and health data, including authenticated sessions, protection in transit and at rest, signing, and key lifecycle management
Own identity architecture for patients, mobile apps, pumps, and cloud services, including authentication, authorization, and least-privilege access
Lead BLE security design for iOS and Android mobile apps, including pairing, bonding, session encryption, device authentication, and trusted reconnects
Define security requirements for CGM and partner integrations, including BLE sensor onboarding, data authenticity, and cloud-to-cloud trust
Establish security and privacy controls for protected health information aligned with HIPAA, FDA cybersecurity expectations, and healthcare privacy obligations
Drive threat modeling and security risk assessment, mapping controls to hazards, requirements, and residual risk
Review architectures and critical implementations and mentor senior engineers
Partner with Product Security and engineering, quality, human factors, regulatory, and clinical teams on security controls, interface contracts, verification evidence, and cybersecurity documentation
Serve on the Security Council as the R&D security architect and provide recorded security positions for designs, early programs, and field issues
Define vulnerability detection, response, and recording across the device fleet, mobile apps, and partner-connected paths
Review security of shared non-UI logic used across platforms

Requirements

What you’ll need

Bachelor's degree in computer science, Electrical Engineering, or Computer Engineering
At least 10 years of professional experience, with substantial recent work architecting security for production connected systems
Experience designing PKI and cryptographic key lifecycles, including issuance, storage, rotation, and revocation
Experience with identity architecture spanning devices, users, and cloud services, including authentication and authorization
Bluetooth Low Energy security experience, including pairing, bonding, and encrypted sessions between a mobile app and a constrained device
Experience defining security architecture across embedded software, iOS and Android mobile apps, and a cloud backend
Working knowledge of HIPAA and protected health information requirements
Experience operating inside a regulated quality system, including traceability and verification requirements
Ability to write and defend architecture decisions balancing safety, security, reliability, and delivery speed
Clear written and verbal communication with engineers and quality, regulatory, and clinical partners
Preferred: experience with insulin delivery, CGM, or Class II/Class III connected medical devices
Preferred: working knowledge of IEC 62304, ISO 14971, FDA design controls, and FDA premarket cybersecurity guidance
Preferred: applied cryptography, secure boot, signed firmware updates, constrained-device key storage, cloud security architecture, third-party BLE sensors, partner cloud integrations, regulatory submissions, threat models, or design history files
Preferred: graduate degree or recognized security certification such as CISSP
Preferred: experience mentoring senior engineers and setting security standards across teams

Benefits

Comp & perks

Medical, dental, and vision insurance
401(k) with company match
Paid time off (PTO)
Additional employee wellness programs
Potential eligibility for incentive compensation