Senior Cloud Security Architect - AWS & IP Protection

BioSpace; Indianapolis (IN); On-site; USD 164,000 - 297,000; Full time

Benefits offered by this job

Company bonus

401(k) plan

Pension

Medical, dental, vision coverage

Flexible benefits

Job summary

Lilly is seeking a Principal Security Architect to own the security architecture for a major cloud-heavy program, primarily on AWS, handling trade secrets and highly sensitive IP. You will lead architecture reviews, threat modeling, risk assessments, and drive security guidance across Security Architecture & Engineering, Privacy, Legal, and Audit.

Requires deep cloud security expertise, risk management skills, and the ability to translate technical risk into clear business language while

Qualifications

• High School Diploma or equivalent with 4+ years in Cyber Security or related field.
• 8+ years of professional experience in security, software or cloud engineering.
• Authorized to work in the United States on a full‑time basis.

Responsibilities

• Own the security architecture and risk posture for the assigned program across cloud, data flows, identity, and third‑party integrations.
• Conduct architecture reviews, threat modeling, and risk assessments.
• Design and review controls for workloads handling trade secrets and highly sensitive IP, including segmentation and encryption.
• Develop secure cloud architecture patterns and provide guidance across cloud platforms.
• Mentor architects and engineers on security architecture and best practices.

Skills

Cloud security

Threat modeling

Security architecture

IAM / identity

Encryption & key management

Risk assessment

Secure SDLC

Security strategy

Security guidance

Education

High School Diploma/equivalent

Job description

Lilly is seeking a Principal Security Architect to own the security architecture for a major cloud-heavy program, primarily on AWS, handling trade secrets and highly sensitive IP. You will lead architecture reviews, threat modeling, risk assessments, and drive security guidance across Security Architecture & Engineering, Privacy, Legal, and Audit.

Requires deep cloud security expertise, risk management skills, and the ability to translate technical risk into clear business language while