At Lilly, we unite caring with discovery to make life better for people around the world. We are a global healthcare leader headquartered in Indianapolis, Indiana. Our employees around the world work to discover and bring life-changing medicines to those who need them, improve the understanding and management of disease, and give back to our communities through philanthropy and volunteerism. We give our best effort to our work, and we put people first. We’re looking for people who are determined to make life better for people around the world.

Ready to put your mark on the world of cybersecurity? We’re looking for a Security Engineer to bring fresh perspectives and bold solutions to our team. In this role, you’ll be instrumental in shaping how our organization provides secure, appropriate, and timely access to enterprise resources.

What you will be doing:

This Security Engineer will be part of the Lilly Cybersecurity team, responsible for delivering and securing technology that supports the Lilly mission, specifically focused on identity and access management (IAM) technologies. In this role, you will partner with the various business, information technology, and larger cyber security teams to ensure technology is designed and deployed securely and aligned with Cybersecurity and enterprise technology strategies. You will create technical specifications, design patterns, standards as code and security guidance across identity capabilities and services where needed. You'll be a key contributor in identifying key processes around the development of our security service and working to develop proactive approaches for support, deployment, and optimizations of security toolsets.

How you will succeed:

• As a Security Engineer, you will bring your technical experience to evaluate and select advanced IAM technologies to meet business and security requirements.

• Drive and deliver the implementation and technical integration of identity technologies to meet business requirements.

• Understand the threat landscape with the ability to translate the general threats into relevant business and technical impacts.

• As a superb communicator with strong interpersonal skills, you will work and collaborate effectively on a team to define, design and implement identity capabilities and solutions.

• Focusing on our business partners, you will develop and implement technical solutions and capabilities in Identity that improve security while enhancing user experience.

• With a high level of curiosity, you’ll keep abreast of the latest developments in IAM technologies, security threats, and regulatory changes.

• Drive the adoption of innovative and creative solutions to address complex, global IAM problems.

• Collaborate with enterprise IT, architects and stakeholders to understand business needs and incorporate feedback into the IAM technologies and solutions.

What you should bring:

• Technical experience across identity and access management technologies such as EntraID, Active Directory, Privileged Access Management, and Identity Governance and Administration.

• Understanding of authentication and authorization technologies and federated identity standards and protocols (multifactor authentication, certificate-based authentication, LDAP Kerberos, OAuth, SAML, OpenID Connect).

• Experience in designing, developing, implementing, and supporting enterprise-class security systems.

• Experience developing solutions with PowerShell, Python, NodeJS, PHP or other development and scripting languages.

• Critical thinking and analytical reasoning skills

• Strong communication and presentation skills, and ability to adapt messaging for diverse audiences.

• Experience in addressing consumer data regulations and integrating regulatory and industry standards (ISO/IEC, PCI DSS, SOX, HIPAA, FDA, GDPR, CCPA) into cybersecurity designs.

• An understanding of common services used in cloud-based architectures, with experience in AWS and/or Azure, and awareness of cloud platform security and controls.

• Experience working in Agile teams and using tools such as Confluence and Jira.

Your basic qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or related field ​.

• 5+ years demonstrated technical experience evaluating, designing, developing and supporting Identity and Access Management technologies and capabilities.

Additional preferences:

• Relevant certifications such as CISSP, CISM, or similar.

• A working knowledge of current IT risks, security implementations, and computer operating and software programs.

• Experience in developing and documenting security standards, guidelines, and best practices.

• Experience in ensuring compliance with applicable laws and regulations, such as ISO/IEC, PCI DSS, SOX, HIPAA, GDPR, CCPA, etc.

Additional information:

• Remote option for non-local candidates.

• Local candidates will be on a hybrid work model at the Lilly Corporate Center in Indianapolis.

• Lilly currently anticipates that the base salary for this position could range from between $63,750 to $162,000 and will depend, in part, on the successful candidate’s qualifications for the role, including education and experience. Full-time equivalent employees also will be eligible for a company bonus (depending, in part, on company and individual performance). In addition, Lilly offers a comprehensive benefit program to eligible employees, including eligibility to participate in a company-sponsored 401(k); pension; vacation benefits; eligibility for medical, dental, vision and prescription drug benefits; flexible benefits (e.g., healthcare and/or dependent day care flexible spending accounts); life insurance and death benefits; certain time off and leave of absence benefits; and well-being benefits (e.g., employee assistance program, fitness benefits, and employee clubs and activities). Of course, the compensation described above is subject to change and could be higher or lower than the range described above. Further, Lilly reserves the right to amend, modify, or terminate its compensation and benefit programs in its sole discretion and Lilly’s compensation practices and guidelines will apply regarding the details of any promotion or transfer of Lilly employees.

Eli Lilly and Company, Lilly USA, LLC and our wholly owned subsidiaries (collectively “Lilly”) are committed to help individuals with disabilities to participate in the workforce and ensure equal opportunity to compete for jobs. If you require an accommodation to submit a resume for positions at Lilly, please email Lilly Human Resources ( Lilly_Recruiting_Compliance@lists.lilly.com ) for further assistance. Please note This email address is intended for use only to request an accommodation as part of the application process. Any other correspondence will not receive a response.

Lilly is an EEO/Affirmative Action Employer and does not discriminate on the basis of age, race, color, religion, gender, sexual orientation, gender identity, gender expression, national origin, protected veteran status, disability or any other legally protected status.

Our employee resource groups (ERGs) offer strong support networks for their members and help our company develop talented individuals for future leadership roles. Our current groups include: Africa, Middle East, Central Asia Network, African American Network, Chinese Culture Network, Early Career Professionals, Japanese International Leadership Network (JILN), Lilly India Network, Organization of Latinos at Lilly, PRIDE (LGBTQ + Allies), Veterans Leadership Network, Women’s Network, Working and Living with Disabilities. Learn more about all of our groups.

#WeAreLilly