Automation Architect

Role Summary

Security Architecture & Engineering needs an architect to own how the team automates its work, and to manage the engineers who build it. This person designs the automation approach, sets the patterns and standards it is built to, and leads a small team delivering against it.

Key Responsibilities

• Own the automation architecture and roadmap for the team, sequencing work against where it returns the most.
• Design and build automation in Python, including integrations with the platforms and systems the team depends on.
• Design and operate AI-augmented and agentic workflows, keeping human judgment in the loop where the decision warrants it.
• Set the harness strategy for agentic workflows — how agents are scaffolded, what context and tooling they are given, and how their output is evaluated.
• Set and uphold engineering standards for automation work, including code review, version control practice, testing, and deployment.
• Maintain and improve the existing codebase so it stays reliable and extensible.
• Identify candidates for automation across the team and work with process owners to design the replacement.
• Contribute technical input to the team's direction in cloud security and application security.
• Manage a small team of automation engineers — setting priorities, reviewing work, conducting performance and development conversations, and supporting their growth.
• Hire for and onboard into the automation team as it grows, and account for what the team delivers.
• Document what is built so the team can operate, extend, and troubleshoot it without the original author.

What You Should Bring

• Strong Python skills applied to real systems — data manipulation, API clients, error handling, logging, testing, and packaging. Able to design a system rather than only write a script.
• Experience integrating systems through REST APIs, including authentication patterns, pagination, rate limiting, and retry logic.
• Enough security depth to interpret the data the automation handles and judge whether the output is sound.
• Background can come from security engineering, security review and architecture work, cloud or application security, or a software engineering path that moved into security.
• Working knowledge of cloud security and application security concepts, and familiarity with the categories of tooling that produce findings in each.
• Experience with AI or agentic workflows applied to real work, or demonstrated aptitude and interest in building them.
• Git and version control fluency, with experience working in a shared codebase through pull requests and code review.
• Experience leading engineers — as a direct manager, or as a technical lead ready to step into people management.
• Clear written communication — able to document a system, explain a design decision, and write up what an automation does for a non-engineer.
• Judgment on where automation belongs and where it does not, and willingness to say so.

Basic Qualifications

• High School Diploma/equivalent with 4+ years of experience in Cyber Security, Information Technology, or related field.
• 5+ years of professional experience across security, software engineering, or a combination, including hands-on development work.
• Experience leading engineers, whether as a direct manager or as a technical lead ready to take on people management.
• Qualified applicants must be authorized to work in the United States on a full-time basis. Lilly will not provide support for or sponsor work authorization or visas for this role.

Preferences

• Bachelor's Degree (example in Cyber Security, Computer Science, Information Technology)
• Strong practical engineering skill, with fluency in Python and comfort integrating systems through APIs.
• Enough security depth to understand the data the automation handles and to judge whether the output is sound.
• Experience designing and operating AI-augmented or agentic workflows, or a clear aptitude and interest in doing so.