Cybersecurity Architect

Responsibilities

• Support the development of the long-term architectural strategy for Lilly’s Identity and Access Management capabilities.
• Establish architectural standards, patterns, and frameworks for Identity and Access Management services.
• Continuously evaluate and challenge the team to adopt emerging identity technologies — including agentic AI identity patterns, non-human identity (NHI) governance, and passwordless/passkey approaches — translating research into actionable adoption roadmaps.
• Actively engage with Security Architecture reviews using a threat driven mindset to identify and mitigate risks.
• Architect NIST-aligned identity controls and collaborate with Cybersecurity teams on policy enforcement.
• Evaluate industry standard methodologies and apply them as appropriate, keeping cyber leaders apprised of trends and emerging technologies.
• Ensure IAM solutions meet regulatory and industry requirements and guidelines.
• Be an automation leader with vision by continuously monitoring and advocating for automation efficiencies and expedited assessments employing automation tooling such as AI, PowerShell, Microsoft Graph API, AWS CLI/SDKs, GCP APIs, GitHub Actions, Terraform, and REST APIs.
• Create executive ready dashboards using data visualization tools such as Splunk, Azure Monitor, AWS CloudWatch, KQL, and/or Power BI.
• Develop infrastructure-as-code solutions that work consistently across multi-cloud environment (e.g. Azure, AWS, and GCP).
• Drive innovation in identity space through industry research, proof-of-concept initiatives, and cloud-first/cloud-native approaches.
• Collaborate with other architects, and key partners to ensure alignment in solutions, technologies, roadmaps, and processes across all Identity and Access Management services to support cloud enablement.
• Ensure frequent, continuous, and effective communications with team members and partners to set expectations and negotiate priorities appropriately.
• Serve as a trusted advisor to partners across Cybersecurity, Engineering, Operations, and Business units.
• Translate complex identity requirements into technical solutions and implementation plans.
• Coach engineers, junior architects, and operational staff on IAM standard methodologies — actively sharing specialized knowledge to increase technical depth across the team and expand the team’s collective impact on the business.

Requirements

• Bachelor's degree in computer science, cybersecurity, or a related technical field.
• 6+ years of experience in Identity and Access Management, with deep expertise in areas such as Authentication Services, Identity Governance, Privileged Access Management, and related technologies (e.g., Okta, CyberArk, Microsoft Entra ID).
• 3+ years of experience in identity architecture, strategy, and roadmap planning in an enterprise environment.

Qualifications

• Qualified candidates must be legally authorized to be employed in the United States.
• Relevant certifications preferred, including CISSP, CISM, Certified Identity and Access Manager (CIAM/CIDPRO), Microsoft Certified: Identity and Access Administrator, or equivalent Auth0/Okta professional certifications.
• Strong influence, communication, writing, and presentation skills.
• Demonstrated critical thinking and natural curiosity.
• Demonstrable ability to challenge existing team processes and recommend improvements that enhance security, increase delivery velocity, reduce operational risk, or improve the quality of identity services.
• Demonstrated ability to gain multi-functional support and influence adoption of identity architectural decisions at a functional or business-unit level.