Open to opportunities

Angela Pigman

@angelapigman

Message

I lead enterprise cloud security architecture for regulated healthcare.

United States

Message

What I'm looking for

I’m looking to lead enterprise security architecture—building scalable guardrails, Secure SDLC, and governance that reduce risk while keeping developers moving fast in regulated environments.

I’m a Security Principal with 10+ years of experience setting enterprise security direction across cloud platforms, application portfolios, and regulated product environments. I’m recognized for establishing durable security architecture, reusable guardrails, and governance models that scale across hundreds of engineers and complex regulatory landscapes.

I bring deep technical expertise and strong cross-functional influence to align risk, compliance, and threat management with modern engineering practices. My background includes extensive experience in AWS, Kubernetes, Secure SDLC, and cloud native security within HIPAA and HITRUST certified ecosystems, with CISSP certification.

In my current role, I serve as an enterprise security design authority—defining security direction across cloud platforms, applications, infrastructure, identity, and governance. I’ve operationalized a Security Risk Management architecture with policies, exception workflows, and prioritization models; delivered HITRUST aligned AWS and Kubernetes reference architectures using AWS Control Tower; and set organization-wide strategy for tooling and control coverage across Secure SDLC, SIEM, Vulnerability Management, MDR, GRC, TPRM, and IAM while advising 20+ engineering teams and 1,000+ associates.

Experience

Work history, roles, and key accomplishments

Current

Security Architect (Principal)

Current

Operating, LLC

Jul 2023 - Present (2 years 11 months)

Served as enterprise security design authority for a regulated healthcare technology organization, defining security direction across cloud, applications, identity, and governance. Established Security Risk Management architecture and HITRUST-aligned AWS/Kubernetes guardrails, and influenced architecture decisions for 20+ engineering teams and 1,000+ associates.

Security Risk Management AWS Control Tower HITRUST Kubernetes Secure SDLC IAM Vulnerability Management Security Governance

Senior Security Engineer (BISO)

Cardinal Health

Apr 2021 - Jul 2023 (2 years 3 months)

Embedded as Product Security Lead (BISO), accountable for security across cloud environments, application security, SDLC tooling, and governance. Partnered with Enterprise Architecture and IT to stand up a new AWS Control Tower environment achieving HITRUST certification (2023), and created security assessment models to drive risk reduction and KPI completion.

AWS Control Tower HITRUST Secure SDLC Cloud Security Application Security Security Governance

Cybersecurity Analyst (AppSec)

Huntington National Bank

Apr 2020 - Apr 2021 (1 year)

Supported application security platforms including SAST/DAST and helped recover and modernize a failing Secure SDLC program. Contributed to application security improvements to strengthen vulnerability detection and secure development practices.

SAST DAST SCA Secure SDLC Application Security Vulnerability Management CI CD Security

Information Risk Management Consultant

Nationwide Insurance

Oct 2015 - Apr 2020 (4 years 6 months)

Provided senior security consulting for 130+ applications in a highly regulated environment, guiding DLP, vulnerability management, IAM, secure configuration, and audit readiness. Built a firewall rule validation tool with an estimated $300K annual savings.

DLP Vulnerability Management IAM Audit Readiness Compliance Support Security Advisory

Web Infrastructure Architect

Highlights for Children

Jan 2010 - Jan 2015 (5 years)

Designed and operated secure Linux and cloud-based web platforms supporting 27+ applications. Led multiple third-party audits and penetration tests, including PCI DSS SAQ A/D implementations.

Linux Security Cloud Platforms PCI DSS PCI SAQ A Penetration Testing Security Audits