iam engineer

Capgemini

<div><div><div><div><p>Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you&rsquo;d like, where you&rsquo;ll be supported and inspired by a collaborative community of colleagues around the world, and where you&rsquo;ll be able to reimagine what&rsquo;s possible. Join us and help the world&rsquo;s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.</p>
<div><div><div><h2 class="jobSectionHeader"><b>Location</b></h2>
</div><div><p>This is a remote role based in the USA.</p>
</div></div><div><div><h2 class="jobSectionHeader"><b>About the Job You're Considering</b></h2>
</div><div><p>We are looking for an experienced <b>AWS IAM Engineer</b> to implement, manage, and scale enterprise Identity and Access Management (IAM) solutions across AWS environments. This role focuses on hands-on engineering, automation, and standardization of IAM workloads, with a strong emphasis on <b>IAM persona buildout for services</b>, <b>infrastructure-as-code modernization</b>, and <b>integration with Identity Directory / Identity Governance (IDC) platforms</b>.</p>
</div></div><div><div><h2 class="jobSectionHeader"><b>Your Role</b></h2>
</div><div><p><b>IAM Engineering &amp; Operations</b></p>
<ul><li>Engineer and maintain <b>AWS IAM workloads</b> across multi-account environments</li>
<li>Build, configure, and manage <b>IAM roles, policies, permission boundaries, and trust relationships</b> for human and service identities</li>
<li>Implement <b>least-privilege access models</b> using RBAC and ABAC principles</li>
<li>Troubleshoot and resolve IAM-related access and permission issues</li><br>
</ul><p></p><p><b>IAM Persona Buildout &amp; Enterprise Rollout</b></p>
<ul><li>Design and implement <b>IAM personas for services, applications, and platform workloads</b></li>
<li>Support <b>enterprise-scale rollout</b> of standardized IAM personas across development, staging, and production environments</li>
<li>Ensure IAM persona consistency, reusability, and compliance across teams and accounts</li>
<li>Partner with security, platform, and application teams to onboard services to approved IAM models</li><br>
</ul><p></p><p><b>Infrastructure as Code &amp; Migration</b></p>
<ul><li>Convert and modernize <b>CloudFormation-based IAM roles and policies to Terraform</b></li>
<li>Engineer <b>Terraform modules</b> for reusable IAM components (roles, policies, instance profiles, service roles)</li>
<li>Maintain and enhance Terraform pipelines for IAM deployments</li>
<li>Support migration activities from legacy IAM implementations (e.g., CNF or bespoke frameworks) to Terraform</li><br>
</ul><p></p><p><b>Identity Directory / Identity Governance (IDC)</b></p>
<ul><li>Integrate AWS IAM with <b>IDC solutions</b> for identity lifecycle management</li>
<li>Engineer IAM workflows supporting <b>identity provisioning, deprovisioning, and access reviews</b></li>
<li>Support federation and identity synchronization between AWS and IDC platforms</li>
<li>Assist with audit readiness, compliance reporting, and governance controls</li>
</ul></div></div></div><p>The base compensation range for this role in the posted location is: <b>$70,176- $144,100.</b></p>
<p>Capgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.</p>
<p>The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction.</p>
<p>These may include, but are not limited to: Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity.</p>
<p>It is not typical for candidates to be hired at or near the top of the posted compensation range.</p>
<p>In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws.</p><br>
<p></p><p><b>Capgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees.</b> In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include:</p>
<ul><li>Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave</li>
</ul><ul><li>Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)</li>
<li>Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)</li>
<li>Life and disability insurance</li>
<li>Employee assistance programs</li>
<li>Other benefits as provided by local policy and eligibility</li>
</ul><p><b>Important Notice:</b> Compensation (including bonuses, commissions, or other forms of incentive pay) is not considered earned, vested, or payable until it becomes due under the terms of applicable plans or agreements and is subject to Capgemini&rsquo;s discretion, consistent with applicable laws. The Company reserves the right to amend or withdraw compensation programs at any time, within the limits of applicable legislation.</p><br>
<p></p><p><b>Disclaimers</b></p>
<p>Capgemini is an Equal Opportunity Employer encouraging inclusion in the workplace. Capgemini also participates in the Partnership Accreditation in Indigenous Relations (PAIR) program which supports meaningful engagement with Indigenous communities across Canada by promoting fairness, accessibility, inclusion and respect. We value the rich cultural heritage and contributions of Indigenous Peoples and actively work to create a welcoming and respectful environment. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law.</p>
<p>This is a general description of the Duties, Responsibilities and Qualifications required for this position. Physical, mental, sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity, Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed, provided that such accommodation does not pose an undue hardship. Capgemini is committed to providing reasonable accommodation during our recruitment process. If you need assistance or accommodation, please reach out to your recruiting contact.</p>
<p>Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process.</p>
<p>Click the following link for more information on your rights as an Applicant in the United States. http://www.capgemini.com/resources/equal-employment-opportunity-is-the-law</p><br>
<p></p><p>Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem.</p></div></div></div></div><p></p>

AWS IAM Engineer

Openkyber

<div><p><b>Title:</b> IAM Engineer(PingOne)</p>
<p><b>Location:</b> - Bethesda, MD, (Remote)</p>
<p><b>Hire Type:</b> Contract</p>
<p>Job Description: Leads the Identity &amp; Access Management (IAM) function in Global Information Security organization through subject matter expertise (L3) on multi-factor authentication (MFA), Web Access Management (WAM) technologies. Functions as the Security Engineer in the team providing engineering support for MFA and SSO service offerings, daily operations, and continuous improvements. Hands-on MFA implementation experience with PingOne SaaS products (DaVinci, Protect, Verify, Directory) including integrations with Ping Federate for SSO services. Analyzes and implements changes to the MFA and SSO infrastructure including configurations and customizations to address application, security, and performance requirements. Works with stakeholders to integrate and onboard new applications and helps troubleshoot integrations with existing applications and systems. Responsible for directing L2/L1 technical staff to address application security issues.</p>
<p><b>Core Work Activities :</b></p>
<ul><li>Functions as an MFA and WAM point of contact for IT system administrators, Service Desk, service providers and application owners.</li>
<li>Works closely with senior engineers and other team members for MFA and SSO services and operational needs.</li>
<li>Routinely collaborates with different security team members including, but not limited to architecture, infrastructure, network, compliance, and incident response</li>
<li>Manages the MFA and WAM services including requirements gathering, design, building, testing, deployment, and operationalization.</li>
<li>Collaborates with multiple stakeholders to support implementation of new applications and services.</li>
<li>Defines and documents MFA and WAM policies and procedures</li>
<li>Creates test cases to ensure cross platform interoperability.</li>
<li>Implements and validates security controls for the MFA and WAM solution.</li>
<li>Designs security solutions to address risks throughout the SDLC process and confirm that the level of risk is acceptable in accordance with policies.</li>
<li>Provides guidance and oversight for L2/L1 troubleshooting of operational issues.</li>
<li>Leads the identification and remediation of relative security events</li>
</ul><p><b>Maintaining Goals:</b> Submits reports in a timely manner, ensuring delivery deadlines are met. Promotes the documenting of project progress accurately. Provides input and assistance to other teams regarding projects.</p>
<p><b>Managing Work, Projects, and Policies:</b> Manages and implements work and projects as assigned. Generates and provides accurate and timely results in the form of reports, presentations, etc. Analyzes information and evaluates results to choose the best solution and solve problems. Provides timely, accurate, and detailed status reports as requested.</p>
<p><b>Demonstrating and Applying Discipline Knowledge:</b> Provides technical expertise and support to persons inside and outside of the department. Demonstrates knowledge of job-relevant issues, products, systems, and processes. Demonstrates knowledge of function-specific procedures. Keeps up-to-date technically and applies new knowledge to job. Uses computers and computer systems (including hardware and software) to enter data and/ or process information.</p>
<p><b>Delivering on the Needs of Key Stakeholders:</b> Understands and meets the needs of key stakeholders. Develops specific goals and plans to prioritize, organize, and accomplish work. Determines priorities, schedules, plans and necessary resources to ensure completion of any projects on schedule. Collaborates with internal partners and stakeholders to support business/initiative strategies Communicates concepts in a clear and persuasive manner that is easy to understand. Generates and provides accurate and timely results in the form of reports, presentations, etc. Demonstrates an understanding of business priorities</p>
<p><b>Additional Responsibilities:</b> Provides information to supervisors and co-workers by telephone, in written form, e-mail, or in person in a timely manner. Demonstrates self-confidence, energy and enthusiasm. Informs and/or updates leaders on relevant information in a timely manner. Manages time effectively and conducts activities in an organized manner. Presents ideas, expectations and information in a concise, organized manner. Uses problem solving methodology for decision making and follow up. Performs other reasonable duties as assigned by manager.</p>
<p><b>Candidate Profile :</b></p>
<ul><li>Required Education and Experience: Undergraduate degree in Computer Sciences or related field or equivalent work experience and certifications</li>
<li>Minimum 5+ years of information security or infrastructure engineering experience including - 4+ years of experience in managing MFA offerings - Passkeys, Biometrics, FIDO tokens, various authenticators, Implementation experience of PingOne products like DaVinci, Verify, Protect, Neo</li>
<li>4+ years' experience of Federation/SSO services, protocols, and technologies - OAuth/OIDC, SAML, WS-FED, Browsers, MDM/MAM, X509 cert-based authentication (user &amp; device)</li>
<li>2+ years' experience with Ping Access and Ping Federate architecture, design, and implementation - Policy design and implementation, Ping Fed custom adapter development, Integration of custom applications</li>
<li>2+ years of experience in Development - JAVA, HTML/JavaScript/JSON, scripting (Ansible, Shell, Perl, Expect)</li>
<li>2+ years of experience translating business requirements to technical requirements with strong written and verbal communication skills</li>
<li>2+ years of experience with LDAP and directory Services using Radiant logic or Ping Directory</li>
</ul><ul><li>Preferred: 5+ years of experience with integrating IAM solutions with infrastructure and applications</li>
<li>2+ years of experience in designing &amp; implementing API services and data transformation layers</li>
<li>2+ years of experience on containerized deployment environments</li>
<li>Current information security certification, including Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified SCADA Security Architect (CSSA) or Certified Secure Software Lifecycle Professional (CSSLP)</li>
<li>Technical knowledge of industry best practices pertaining to MFA/WAM services</li>
<li>Experience with defining &amp; fulfilling Key Performance Indicators for MFA infrastructure</li>
<li>Experience in the IAM domain with user lifecycle management, authentication, authorization, federation, and privileged access management</li>
<li>Experience in implementing the capabilities such as Passwordless or adaptive authentication</li>
<li>Experience with cloud/SaaS IAM/WAM services</li>
<li>Experience with Zero-Trust Framework</li>
<li>Experience with CASB and WAF technologies.</li>
<li>Experience doing business analysis and requirements gathering for complex business systems</li>
<li>Responsible for identifying, evaluating, and participating in decision making around new and emerging IAM/MFA technologies and should be able to support other areas of Information Security as needed</li>
<li>Strong understanding of PKI, certificate management, security, and provisioning of identity data.</li>
</ul><p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

OCI IAM Engineer

Paramount Assure

<div><div>RSA G&amp;L Engineer - Qty 2</div><div>
Experience - 5+ years experience</div><div>
Qualification - Bachelors Degree in IT or computer science</div><div>
Certification - RSA Governance &amp; Lifecycle Certified Implementor</div><div>
Target Region - Riyadh Saudi</div><div>
Budget - 24 LPA INR / Take Home+Per Diem of approx 14k to 15k SAR</div><div></div><div><br>
Job Summary -</div><div>
The role involves activities such as configuration; development of rules or workflows; integration with applications; enhancements; administration and managing support / operations of RSA G&amp;L Solution. It is expected the candidate has experience delivering such activities for multiple clients.</div><div></div><div><br>
Job Responsibility -</div><div>
Configure RSA G&amp;L solution, ensuring alignment with customer requirements and seamless integration with diverse systems and applications while applying best practices and standards for secure coding, testing, and documentation.</div><div>
Assume leadership in the design, architecture, and end-to-end implementation of intricate IGA solutions, effectively addressing complex integration challenges.</div><div>
Oversee the comprehensive IGA implementation lifecycle, encompassing requirement analysis, design, development, testing, deployment, and documentation, adhering to industry best practices and methodologies.</div><div>
Customize IGA integrations with third-party applications, leveraging Java, SQL, REST APIs, and SCIM to tailor solutions to specific client needs.</div><div>
Engage with clients to meticulously gather requirements, conduct informative technical workshops, and ensure clear translation of client needs into robust technical solutions.</div><div>
Provide advanced technical support, troubleshoot complex issues, and collaborate effectively with product engineering and operations teams to facilitate efficient resolutions.</div><div>
Lead project quality assurance activities, including technical QA reviews</div><div></div><div><br>
Technical Skills -</div><div>
Hands-on experience in designing, developing, customizing, configuring, and deploying IGA solutions, delivering atleast 3 independent end to end projects including but not limited to use case documentation, design, defining the architecture, development, testing, deployment, and post-deployment support.</div><div>
Minimum 3 years experience of installation, configuration (rules, workflows, certifications, lifecycle, policies) &amp; integrations with RSA G&amp;L Products.</div><div>
Experience in supporting User acceptance testing, knowledge transfer activities &amp; documentation.</div><div>
Proficiency in Java/J2EE, BeanShell/JavaScript, XML, SQL, Web Services (REST/SOAP), Directories (LDAP) and Unix/Linux environments, with experience in scripting (Unix Shell/Perl) and automating batch jobs.</div><div>
Expertise in IGA, including User Lifecycle Management, Provisioning, Reconciliation, Auditing, Access Certification, and Segregation of Duties (SoD).</div><div>
Understanding of overall IAM concepts, technologies, and solutions such as Single Sign-On (SSO), Multi-Factor Authentication (MFA)and Privileged Access Management (PAM).</div><div></div><div><br>
Soft Skills -</div><div>
Verbal &amp; Written (Clear expression) fluency to deliver technical presentations and documentations. Active listening skills.</div><div>
Proven ability to engage directly with customers for requirement gathering and expectation management.</div><div>
Arabic is an added advantage.</div><div>
Adaptability: Adjusting to new situations. Open to take new tasks &amp; responsibilities. Self-motivated, detail-oriented, positive, collaborative, and organized individual with the capability to maintain flexibility and take ownership of projects and processes.</div><div>
Time Management: Prioritizing tasks and meeting deadlines.</div><div>
Learnability: Willingness to continuously learn, especially in the fast-evolving field of IT, Cybersecurity and IGA.</div><div>
Problem-solving: Critical thinking and creativity.</div><div>
Emotional Intelligence: Managing emotions effectively.</div><div>
Conflict Resolution: Handling disagreements constructively.</div><div>
Professionalism: Demonstrating responsibility and respect.</div></div><div></div>

Senior IAM Engineer

<div><p>Azure AD Engineer Contract Location: Mckinney, TX (Hybrid) Job Description: The Identity &amp; Access Management (IAM) team plays a pivotal role in our Cybersecurity program by enabling secure, scalable, and compliant access to enterprise and customer systems. Our IAM program encompasses:</p>
<ul><li>Identity Governance &amp; Administration (IGA)</li>
<li>Authentication Services</li>
<li>Privileged Access Management (PAM)</li>
<li>Public Key Infrastructure (PKI)</li>
<li>Consumer Identity &amp; Access Management (CIAM)</li>
</ul><p>We are seeking a Cybersecurity Staff Engineer IAM to lead the design, implementation, and continuous improvement of IAM solutions. This role will focus on RBAC, MFA, federated authentication, certificate management, privileged access, and user lifecycle automation. Ideal candidates will bring deep technical expertise across SailPoint ISC, Entra ID ( Azure AD), Active Directory, PAM, and PKI, along with a strong understanding of identity architecture and security best practices.</p>
<b>Key Responsibilities:</b>
<ul><li>Lead the design and implementation of IAM capabilities, including identity lifecycle, authentication, authorization, and access controls.</li>
<li>Collaborate across departments to define RBAC models, MFA strategies, access governance, and application integrations.</li>
<li>Serve as a trusted IAM subject matter expert (SME) to technical teams, business units, and senior leadership.</li>
<li>Guide to integration efforts between enterprise applications and identity platforms (e.g., Entra ID, AD, SailPoint ISC).</li>
<li>Oversee multiple IAM projects concurrently, ensuring timely, secure, and scalable delivery.</li>
<li>Drive stakeholder alignment, including technical teams and business leaders, through proactive communication and conflict resolution.</li>
<li>Provide technical mentorship to junior engineers and develop documentation to support operational continuity and audit readiness.</li>
<li>Analyze and evaluate new IAM technologies, including authentication protocols, PKI, and automation tooling.</li>
<li>Partner with internal teams on change management, access reviews, and identity lifecycle automation initiatives.</li>
<li>Contribute to the strategic roadmap for IAM, identifying opportunities for innovation, risk reduction, and operational efficiency.</li>
</ul><b>Required Qualifications:</b>
<ul><li>8+ years of experience in Identity &amp; Access Management or a related cybersecurity discipline.</li>
<li>Deep hands-on experience with SailPoint ISC, Entra ID ( Azure AD), Active Directory, and MFA/SSO solutions.</li>
<li>Strong understanding of IAM architecture, RBAC, PIM, and CIAM principles.</li>
<li>Proficient in scripting and automation (e.g., PowerShell, Python).</li>
<li>Demonstrated ability to lead IAM initiatives and engage with both technical and non-technical stakeholders.</li>
<li>Excellent communication, analytical, and organizational skills.</li>
<li>Comfortable working independently or within a team in a hybrid work.</li>
</ul><p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

Azure Network Engineer

Tata Consultancy Services (TCS)

<div></div><div><div><div><p><div><div><div><div><div><div><p>Job Requirements*</p></div></div></div><br>
<div><div><div><ul><li>6&ndash;10 years in IAM with hands-on Auth0 operations and integrations.</li><li>Strong knowledge of SAML, OIDC/OAuth, MFA, conditional access, and B2C policy management.</li><li>Experience performing health checks, monitoring, SOP creation, reporting, and audit support.</li><li>Proven ability to resolve tickets, process provisioning requests, and deliver RCA for recurring issues.</li><li>Ability to execute minor enhancements (patches/upgrades, MFA policy creation, app onboarding).</li></ul>
</div>
</div></div></div><br>
</div></div></p></div></div><div><div><div><b>Location</b></div>
<div>Hyderabad</div>
</div><div><div><b>Job Function</b></div>
<div>TECHNOLOGY</div>
</div><div><div><b>Role</b></div>
<div>Engineer</div>
</div><div><div><b>Job Id</b></div>
<div>402864</div>
</div><div><div><b>Desired Skills</b></div>
<div>Cyber Security | IAM</div>
</div></div><p>Desired Candidate Profile
</p><div><div><b>Qualifications</b> : BACHELORS IN SYSTEMS ENGINEERING</div></div></div><div></div>

Okta Engineer

The Home Depot

<div><p><b>Position Purpose:</b></p><div><p>
The Cybersecurity Principal Engineer, AI Identity (Non‑Human Identity) is a senior, hands‑on technical leader within The Home Depot Cybersecurity Architecture &amp; Innovation team. This role provides enterprise‑wide thought leadership and architectural direction for Identity and Access Management (IAM) with a specialized focus on AI, agentic AI, and Non‑Human Identity (NHI).</p><p></p><p>
The Principal Engineer serves as a recognized company and industry expert, combining deep IAM expertise with a broad understanding of cybersecurity, cloud, and modern enterprise technologies. The role operates in a horizontal capacity, supporting and guiding multiple cybersecurity and technology functions through solution design, evaluation, prototyping, documentation, and operationalization.</p><p></p><p>
This position plays a critical role in shaping Home Depot&rsquo;s AI identity strategy and maturity, defining the foundational IAM architecture and technology enablement stack required to securely support AI workloads, services, and autonomous agents. The Principal Engineer partners closely with cybersecurity, engineering, architecture, and operations teams to ensure identity solutions are scalable, secure, and aligned to both current and future‑state enterprise architecture.</p></div><p><b><br>
Key Responsibilities:</b></p><ul><li>
100% Deliver Execution, Plans &amp; Aligns - Review, analyze, identify, and provide solutions to mitigate potential security control gaps enterprise wide; Collaborate across teams to reduce vulnerabilities, risks, and incident management; Partner with engineers, technology, and business partners to implement and maintain a secure environment</li></ul><p><b><br>
Direct Manager/Direct Reports:</b></p><ul><li>
This position typically reports to Distinguished Engineer</li><li>
This position has 0 Direct Reports</li></ul><p><b><br>
Travel Requirements:</b></p><ul><li>
No travel required.</li></ul><p><b><br>
Physical Requirements:</b></p><ul><li>
Most of the time is spent sitting in a comfortable position, and there is frequent opportunity to move about. On rare occasions, there may be a need to move or lift light articles.</li></ul><p><b><br>
Working Conditions:</b></p><ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul><p><b><br>
Minimum Qualifications:</b></p><ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li></ul><div><ul><li>
Extensive enterprise experience in Identity and Access Management (IAM), including identity provisioning, authentication, and authorization.</li><li>
Hands‑on experience with Non‑Human Identity (NHI), such as service accounts, workload identities, or machine identities</li><li>
Proven ability to independently evaluate, design, and prototype complex security or identity solutions</li><li>
Experience working within large, highly integrated enterprise technology environments</li><li>
Strong understanding of core cybersecurity concepts, including authentication/authorization, encryption, segmentation, and secure system design</li><li>
Broad technical knowledge across cloud, compute, networking, databases, and application development</li><li>
Experience with cloud platforms (e.g., AWS, Azure, or equivalent) and cloud‑native identity patterns</li><li>
Proficiency in at least one programming or scripting language used for prototyping, automation, or integration</li><li>
Ability to produce clear technical documentation, including architecture artifacts and design decisions</li><li>
Strong collaboration skills and the ability to provide technical guidance across cross‑functional teams</li></ul></div><p></p><p><b><br>
Preferred Qualifications:</b></p><div><ul><li>
Demonstrated experience applying IAM concepts to AI, agentic AI, and emerging AI technology patterns</li><li>
Experience designing or supporting identity strategies for AI workloads, services, or autonomous agents</li><li>
Proven experience developing holistic reference architectures, roadmaps, and future‑state designs</li><li>
Familiarity with Zero Trust principles and modern identity‑centric security architectures</li><li>
Experience guiding engineering and operations teams through operationalization and technology handoff</li><li>
Knowledge of industry cybersecurity frameworks and standards (e.g., NIST or similar)</li><li>
Experience conducting technology evaluations, proofs of concept, and capability assessments</li><li>
Ability to represent IAM or security architecture in cross‑functional design and innovation forums</li><li>
Demonstrated success operating independently in fast‑moving, evolving technology initiatives</li></ul></div><p><br>
</p><p><b>Minimum Education:</b></p><ul><li>
The knowledge, skills, and abilities are typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul><p><b><br>
Preferred Education:</b></p><ul><li>
No additional education</li></ul><p><b><br>
Minimum Years of Work Experience:</b></p><ul><li>
10</li></ul><p><b><br>
Preferred Years of Work Experience:</b></p><ul><li>
No additional years of experience</li></ul><p><b><br>
Minimum Leadership Experience:</b></p><ul><li>
None</li></ul><p><b><br>
Preferred Leadership Experience:</b></p><ul><li>
None</li></ul><p><b><br>
Certifications:</b></p><ul><li>
None</li></ul><p><b><br>
Competencies:</b></p><ul><li>
Decision Quality</li><li>
Plans and Aligns</li><li>
Develops Talent</li><li>
Manages Conflict</li></ul></div><p></p>

Cybersecurity Principal, AI Identity (REMOTE)

<div><div><p><b>Position Purpose:</b></p><p>
The Senior Cybersecurity Engineer &ndash; Non‑Human Identity (NHI) partners with Architecture, IAM, cloud, platform, DevOps, and application teams to design, build, and operate enterprise‑scale discovery, governance, and lifecycle automation for non‑human identities (NHIs). NHIs include service accounts, API tokens, cloud IAM roles, automation identities, CI/CD identities, and AI agents across on‑premises, hybrid, and multi‑cloud environments. This role focuses on automation, collaboration, and risk reduction, helping modernize authentication patterns and reduce reliance on long‑lived credentials.</p><p><b><br>
Key Responsibilities:</b></p><ul><li>
100% Deliver Execution, Plans &amp; Align, Problem Solving - Design automation workflows and capabilities in support of data collection, investigation and incident response Develop threat hunting and data analysis strategy and capabilities Identify and propose new technologies, methodologies and/or approaches to detecting malicious activity Utilize indicators to scope and respond proactively to emerging threats Design, build, configure, maintain and monitor cybersecurity threat defense capabilities and user access management</li></ul><p><b><br>
Direct Manager/Direct Reports:</b></p><ul><li>
This Position typically reports to Manager or Sr. Manager</li><li>
This Position has 0 Direct Reports</li></ul><p><b><br>
Travel Requirements:</b></p><ul><li>
No travel required.</li></ul><p><b><br>
Physical Requirements:</b></p><ul><li>
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.</li></ul><p><b><br>
Working Conditions:</b></p><ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul><p><b><br>
Minimum Qualifications:</b></p><ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li></ul><p><b><br>
Preferred Qualifications:</b></p><p><b>
Non‑Human Identity Discovery &amp; Automation</b></p><ul><li>
Work with IAM, Architecture, and platform teams to design and operate automated discovery capabilities for NHIs across servers, applications, cloud platforms, and CI/CD pipelines</li><li>
Contribute to development of automation and tooling (Python, PowerShell) to:<ul><li>
Discover NHIs across infrastructure and environments</li><li>
Parse configuration files, logs, APIs, and Infrastructure‑as‑Code to identify embedded or hard‑coded credentials</li><li>
Enrich NHI metadata including ownership, purpose, environment, and lifecycle state</li></ul></li><li>
Partner with engineering teams to automate NHI hygiene activities such as ownership validation, lifecycle tracking, and reporting</li></ul><p><b>
NHI Lifecycle &amp; Governance</b></p><ul><li>
Collaborate with IAM, Architecture, cloud, and ITSM teams to design and integrate NHI lifecycle workflows, including onboarding, access reviews, credential rotation, and decommissioning</li><li>
Integrate NHI workflows with enterprise platforms, including: IAM and PAM solutions, Cloud IAM services, Secrets management platforms, ITSM and workflow tools</li><li>
Support enforcement of clear ownership, purpose, and lifecycle accountability for NHIs</li><li>
Assist with enterprise access reviews, attestations, and audit evidence generation</li></ul><p><b>
Partner with application, platform, and DevOps teams</b> to analyze authentication flows and refactor legacy patterns toward modern, password‑less NHI designs, including managed identities, OAuth client credentials, and short‑lived tokens.</p><ul><li>
Provide NHI context to security monitoring and incident response teams to support investigations involving service account misuse, anomalous automation behavior, or credential compromise</li><li>
Apply data‑driven techniques such as pattern recognition, baselining, and anomaly indicators to analyze NHI usage trends and detect drift or misuse.</li></ul><p><b>
AI Agent Identity Governance</b></p><ul><li>
Partner with architecture and platform teams to support onboarding and governance of AI agents as non‑human identities</li><li>
Help ensure AI agents have clearly defined ownership, scoped access, and documented lifecycle expectations</li></ul><p><b>
Basic PKI Responsibilities (Foundational)</b></p><ul><li>
Support certificate‑based NHIs (e.g., TLS, mTLS, client authentication) as part of broader NHI governance</li><li>
Integrate NHI discovery and lifecycle workflows with enterprise PKI and certificate management platforms</li><li>
Ensure certificates and private keys follow approved standards for issuance, rotation, and expiration, without direct ownership of PKI infrastructure</li><li>
Collaborate across security, cloud, and platform engineering teams to align NHI controls with Zero Trust principles and THD security standards.</li><li>
Produce and maintain technical documentation, runbooks, and onboarding guides, and support audit and compliance activities through NHI evidence and reporting.</li><li>
Continuously improve the NHI program by identifying automation opportunities, reducing operational toil, and improving accuracy, coverage, and maturity of non‑human identity controls.</li></ul><p><b><br>
Minimum Education:</b></p><ul><li>
The knowledge, skills and abilities typically acquired through the completion of a high school diploma and/or GED.</li></ul><p><b><br>
Preferred Education:</b></p><ul><li>
No additional education</li></ul><p><b><br>
Minimum Years of Work Experience:</b></p><ul><li>
3</li></ul><p><b><br>
Preferred Years of Work Experience:</b></p><ul><li>
No additional years of experience</li></ul><p><b><br>
Minimum Leadership Experience:</b></p><ul><li>
None</li></ul><p><b><br>
Preferred Leadership Experience:</b></p><ul><li>
None</li></ul><p><b><br>
Certifications:</b></p><ul><li>
None</li></ul><p><b><br>
Competencies:</b></p><ul><li>
Action Oriented</li><li>
Collaborates</li><li>
Communicates Effectively</li><li>
Customer Focus</li><li>
Drives Results</li></ul></div><p></p><p><br>
Apply End Date: 05/19/2026</p></div>

Cybersecurity Senior Engineer - Non Human Identity (Remote)

Search 3530+ Iam engineer jobs near you this May. New roles added regularly across leading industries. Apply today.