Principal Security Architect (Medical Device Cybersecurity)

Location: San Diego, California, United States; hybrid, with 1–2 days per week in the office. Other location: Acton, Massachusetts.

Annual base salary: $196,500.00–$294,750.00 for U.S.-based positions; incentive compensation may also apply.

Company

hirify.global is a medical device company developing the Omnipod insulin delivery platform, connected pumps, CGM integrations, mobile applications, and cloud services for diabetes and other therapeutic areas.

What you will do

• Define and evolve security architecture across insulin pumps, CGM integrations, iOS and Android apps, and cloud services, including identity, key management, secure updates, telemetry, and API boundaries.
• Design and govern PKI, device and service identity, certificate lifecycles, cryptographic protections, secure key storage, authenticated sessions, and least-privilege access.
• Lead BLE security design for mobile apps and pumps, including pairing, bonding, device authentication, encrypted sessions, and trustworthy reconnects.
• Define security requirements for CGM and partner integrations, protected health information, vulnerability handling, device fleets, and connected cloud paths.
• Drive threat modeling, risk assessment, requirements traceability, verification evidence, and submission-ready cybersecurity documentation within a regulated quality system.
• Review architectures and critical implementations, mentor senior engineers, partner with Product Security and engineering teams, and serve on the Security Council as the R&D security architect.

Requirements

• Bachelor’s degree in Computer Science, Electrical Engineering, or Computer Engineering.
• At least 10 years of professional experience, including substantial recent work architecting security for production connected systems.
• Demonstrated experience designing PKI and cryptographic key lifecycles, including issuance, storage, rotation, and revocation.
• Experience with identity architecture across devices, users, and cloud services, including authentication and authorization.
• Demonstrated Bluetooth Low Energy security experience, including pairing, bonding, and encrypted sessions between mobile apps and constrained devices.
• Experience defining security architecture across embedded software, iOS and Android mobile apps, and a cloud backend.
• Working knowledge of HIPAA and its application to the collection, storage, and transmission of protected health information.
• Experience working within a regulated quality or design-control system, including requirements traceability and verification.
• Ability to write and defend architecture decisions balancing safety, security, reliability, and delivery speed, with clear communication to engineering, quality, regulatory, and clinical partners.

Nice to have

• Experience with insulin delivery, CGM, or other Class II or Class III connected medical devices.
• Working knowledge of IEC 62304, ISO 14971, FDA design controls, and FDA premarket cybersecurity guidance.
• Applied cryptography experience, including protocol selection, certificate lifecycle operations, and reviewing key use in product code.
• Experience with secure boot, signed firmware updates, and key storage on constrained or embedded devices.
• Cloud security architecture experience covering service identity, secrets management, least privilege, logging, and monitoring for device fleets.
• Experience setting security requirements for third-party BLE sensors and partner cloud integrations, or contributing cybersecurity content to regulatory submissions, threat models, or design history files.
• Graduate degree in a relevant engineering or computer science field, or a recognized security certification such as CISSP.
• Experience mentoring senior engineers and setting security standards across teams as an individual contributor.

Culture & Benefits

• Hybrid work arrangement with 1–2 office days per week.
• Medical, dental, and vision insurance.
• 401(k) with company match.
• Paid time off and employee wellness programs.
• Performance-driven environment focused on customer expectations and shared values.

Hiring process

• Submit an application online through the hirify.global Careers site.
• The posting remains open until the position is filled.