Description

You will own the strategic standards and controls for securing non-human identities and privileged access across multi-cloud IAM platforms.

This role is on-site.

Responsibilities

• Research and develop strategic standards for securing non-human identities using modern privileged access concepts.
• Collaborate with Technology Risk to drive policies, standards, and security capabilities.
• Act as subject matter expert for AI identity security, engineering guardrails, and preventative/detective controls.
• Lead cross-team stakeholder management through status updates, demos, and requirements clarification.
• Respond to security incidents, perform root cause analysis, and provide on-call support for IAM platforms.

Required Skills

• Minimum 8 years of experience as an IAM Engineer with hands-on privileged access technologies.
• Strong proficiency in AWS IAM and Azure Entra ID for controls enforcement.
• Expertise in authentication technologies: SSO, SAML, OIDC, OAuth2, SCIM, RBAC, ABAC, and zero-trust principles.
• Skilled in directory services and multi-cloud identity governance (Azure AD, AWS AD, EntraID, Okta).
• Experience with Terraform, Ansible, Python, and Unix/Windows systems for IAM automation.
• Understanding of agentic AI systems, including binding AI agents to enterprise identities and policy-based guardrails.
• Familiarity with API gateways, service meshes (Kong, Istio), and machine identity management.

Preferred Skills

• Experience with StrongDM, CyberArk, or Azure Key Vault.
• Knowledge of Model Context Protocol (MCP), mutual TLS, and OAuth2 token exchanges.

Key Skills

Education

Any Graduate