Description

You will secure privileged access and identity infrastructure while integrating agentic AI systems into enterprise security controls.

This role is on-site.

Responsibilities

• Design and implement privileged access management solutions using StrongDM, CyberArk, Azure Key Vault, and AWS Secrets Manager.
• Secure agentic AI systems by binding agents to enterprise identities, enforcing least privilege, and applying policy-based guardrails.
• Manage machine identities and service meshes (Kong, Istio, Apigee) including certificates, workload IDs, and SPIFFE/SPIRE.
• Automate IAM administration and infrastructure using Terraform, Ansible, Pulumi, and Python across Unix/Windows environments.
• Implement security controls for OWASP Top 10 NHI risks and secure AI model interactions via mutual TLS and OAuth2 token exchanges.

Required Skills

• 7+ years of hands-on experience as an IAM Engineer.
• Deep knowledge of privileged access technologies and enterprise identity management.
• Understanding of agentic AI systems, Model Context Protocol (MCP), and AI security tools.
• Experience securing API gateways and service meshes.
• Proficiency in infrastructure as code tools: Terraform, Ansible, Pulumi.
• Strong scripting skills in Python.
• Knowledge of OAuth2, mutual TLS, and machine identity management.

Preferred Skills

• Recent experience applying AI security principles to production environments.
• Familiarity with Cloud-init and advanced Unix/Windows system administration.

Key Skills

Education

Not specified