Principal Security Architect
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Principal Security Architect owning cloud and application security for Lilly’s AWS-heavy strategic programs. Protecting trade secrets through architecture reviews, threat modeling, and risk governance.
Responsibilities:
- Own the security architecture and risk posture for an assigned strategic program spanning cloud platforms, data flows, identity, and third-party integrations
- Conduct architecture and design reviews, threat modeling, and risk assessments
- Design and review controls for workloads handling trade secrets and highly sensitive intellectual property
- Establish secure cloud architecture patterns across platforms in scope
- Apply threat modeling frameworks and recognized industry security standards, frameworks, and best practices
- Perform threat analysis and modeling throughout the secure development and operations lifecycle
- Drive risk acceptance where residual risk cannot be eliminated, secure approvals, and document outcomes
- Develop reference architectures, design patterns, and security guidance from recurring requirements
- Partner across Security Architecture & Engineering and collaborate with program leadership, engineering, privacy, legal, audit, and other partners
- Provide technical direction, leadership, and mentorship to architects and engineers
Requirements:
- High School Diploma/equivalent with 4+ years of experience in Cyber Security, Information Technology, or a related field
- 8+ years of professional experience across security, software engineering, cloud engineering, or a combination, including hands-on cloud security work
- Qualified applicants must be authorized to work in the United States on a full-time basis
- Deep security expertise across cloud, application security, identity, and integration patterns
- Depth in at least one major cloud platform (AWS, Azure, or GCP), including identity and access management, network architecture, workload protection, encryption and key management, and cloud security posture management
- Experience applying cloud security expertise across additional cloud providers
- Demonstrated experience securing workloads handling trade secrets or highly sensitive intellectual property, including segmentation, access boundaries, and egress controls
- Strong understanding of secure application development and the secure software development lifecycle
- Strong experience in threat analysis and modeling
- Solid understanding of cybersecurity engineering and operations
- Exceptional critical thinking and analytical reasoning
- Ability to define and influence security strategy while guiding tactical work
- Ability to translate technical risk into clear business language and document risk decisions for audit and executive review
- Excellent communication and presentation skills for technical and non-technical audiences
- Experience developing and documenting architecture references, security guidelines, and standards
- Experience mentoring more junior architects and engineers
Benefits:
- Company bonus, depending in part on company and individual performance
- Company-sponsored 401(k)
- Pension
- Vacation benefits
- Medical, dental, vision, and prescription drug benefits
- Flexible benefits, including healthcare and/or dependent day care flexible spending accounts
- Life insurance and death benefits
- Certain time off and leave of absence benefits
- Well-being benefits, including employee assistance program, fitness benefits, and employee clubs and activities
- Employee resource groups open to all employees
Similar Jobs
Regional Security Manager
Regional Security Manager protecting Saab’s defence and security operations across Southern Africa. Coordinating personnel, risk, compliance, crisis response and regional security strategy.
Senior Security Architect
Senior Security Architect designing scalable cybersecurity solutions for Humana’s healthcare insurance and CenterWell services. Supporting cloud, application, risk, compliance, automation, and acquisition integration initiatives.
Managing Engineer – Data Security Engineering
Managing Engineer leading Allstate’s data security engineering team. Building automated DLP, data intelligence, and data access controls for insurance operations.
SAP Security Consultant – AMS
SAP Security Consultant administering roles, authorizations, and access governance for DyFlex clients. Supporting audits, SoD analysis, GRC, upgrades, and managed SAP environments.
Senior Security Engineer, Customer Transparency
Senior Security Engineer improving customer transparency for Tanium’s AI-powered endpoint management and security platform. Managing vulnerability disclosure, SBOM visibility, bug bounty operations, and security advisories.
Técnico/a de Seguridad, PAM – CyberArk
Técnico/a PAM CyberArk administrando cuentas privilegiadas, credenciales y Safes. Soporte de servicios gestionados de ciberseguridad para un cliente financiero de Logicalis Spain.
Domain Lead – Transformation, Cybersecurity Strategy Adoption
Cybersecurity transformation lead embedding policies, change management, and security adoption across SNCB/NMBS. Driving workforce engagement and governance for Belgium’s national railway.
Senior IT Systems, Security Engineer
Senior engineer implementing secure identity, endpoint, cloud, and network systems for Defense Unicorns’ federal and enterprise customers. Supporting compliance-ready software delivery and cybersecurity operations.
IT Systems, Security Engineer
IT Systems & Security Engineer implementing and securing customer IT environments for Defense Unicorns. Configuring identity, endpoints, networks, compliance controls, and automation.
Senior Security Engineer
Senior Security Engineer securing Redox’s cloud-native healthcare data interoperability platform. Hardening Kubernetes, containers, infrastructure, and application security across U.S.-based remote engineering teams.
Mid-Level Information System Security Officer, ISSO
ISSO owning cybersecurity posture and RMF compliance for systems supporting a large federal agency. Leading assessments, continuous monitoring, POA&M remediation, and authorization readiness.
Cyber Security Engineer
Cyber Security Engineer protecting HBK’s global enterprise IT environment. Securing cloud, network, endpoint, identity, and AI systems for a global test and measurement leader.
Senior Information Systems Security Engineer
Senior ISSE authorizing Navy cybersecurity systems for Leidos' enterprise IT program. Managing RMF, ATO packages, STIGs, vulnerability compliance, and DoD security documentation.
Security Engineer
Security Engineer leading advanced penetration testing and agentic AI workflows for Cisco’s cloud and on-premises products. Identifying vulnerabilities and guiding remediation to strengthen global customer security.
Senior Cloud Security Engineer
Senior Cloud Security Engineer securing complex client Azure environments. Leading cloud security architecture, incident response, IAM, compliance, and automation initiatives.
Cybersecurity Engineer
Cybersecurity Engineer securing Business Wire’s applications, cloud, and IT systems. Integrating security testing, vulnerability management, incident response, and security awareness practices.
Senior Product Security Engineer
Senior Product Security Engineer securing Staffbase’s AI-native employee experience platform. Improving security automation, Kubernetes and CI/CD security, and vulnerability detection.
Senior Penetration Testing Analyst
Senior penetration tester conducting application or network security assessments for Sophos, a cybersecurity provider. Leading client readiness, exploitation testing, reporting, and remediation discussions.
SAP Security Consultant – Contract
SAP Security Consultant designing and delivering ECC, S/4HANA, Fiori, BTP, and GRC security solutions. Supporting SAP implementations and operations for leading Australian enterprises.
Senior Security Engineer
Senior Security Engineer hardening beverage-industry technology platforms across VIP’s U.S. operations. Leading segmentation, detection, vulnerability, identity, and incident-response engineering.