Job Description

Cyber Security - IAM Professional Services Location: Irvine, CA - onsite Duration: 6 months PAM Lead "Minimum 7+ years as an IAM Engineer with hands-on experience in privileged access technologies, with recent experience in agentic AI and securing OWASP to 10 NHI risks. StrongDM, CyberArk, Azure Key Vault, AWS Secrets and other privileged solution areas are a plus.

• Understanding of agentic AI systems, including binding AI agents to enterprise identities, least privilege enforcement, policy-based guardrails, Model Context Protocol (MCP), mutual TLS, OAuth2 token exchanges, and AI security tools.
• Familiarity with API gateways, service meshes (Kong, Istio, Apigee), and machine identity management (certificates, workload IDs, SPIFFE/SPIRE).
• Experience with IAM automation and administration using Terraform, Ansible, Cloud-init, Pulumi, Python, and Unix/Windows systems.
• Strong proficiency in authentication technologies: SSO, federation protocols (SAML, OIDC, OAuth2), API authentication, SCIM, RBAC, ABAC, JIT provisioning, and zero-trust principles.
• Expertise in privileged access management, including credential vaulting, session management, and PAM/PAW models.
• Skilled in directory services and multi-cloud identity governance (Azure AD, AWS AD, EntraID, Okta) and cloud IAM across AWS, Azure, and Google Cloud Platform.
• Awareness of open standards, threat modeling, insider threats, and continuous authentication.
• Strong organization, project delivery, communication, collaboration, and leadership skills."
• Researching and developing strategic standards and controls for securing non-human identities by employing modern privileged access concepts
• Collaborate with Technology Risk to drive policies and standards and implement robust security capabilities
• Serve as subject matter expert for AI identity security, privileged access, assigned product portfolios, engineering guardrails and preventative/detective controls
• Support IAM encryption, data privacy strategies, and secure integrations with external vendors and cloud providers
• Leading and ensuring success with cross-team stakeholder management through multiple formats (status updates, demos, training, and clarify requirements)
• Integrate with enterprise security tools and platforms; identify automation opportunities to improve security process accuracy and efficiency
• Respond to security incidents, perform root cause analysis, and provide on-call support for IAM platforms
• Support controls enforcement in with Cloud IAM services (AWS IAM, Azure Entra ID)

Role Descriptions: Researching and developing strategic standards and controls for securing non-human identities by employing modern privileged access concepts Collaborate with Technology Risk to drive policies and standards and implement robust security capabilities Serve as subject matter expert for AI identity security| privileged access| assigned product portfolios| engineering guardrails and preventative detective controls Support IAM encryption| data privacy strategies| and secure integrations with external vendors and cloud providers Leading and ensuring success with cross-team stakeholder management through multiple formats (status updates| demos| training| and clarify requirements) Integrate with enterprise security tools and platforms identify automation opportunities to improve security process accuracy and efficiency Respond to security incidents| perform root cause analysis| and provide on-call support for IAM platforms Support controls enforcement in with Cloud IAM services (AWS IAM| Azure Entra ID) Essential Skills: Minimum 7 years as an IAM Engineer with hands-on experience in privileged access technologies| with recent experience in agentic AI and securing OWASP to 10 NHI risks. StrongDM| CyberArk| Azure Key Vault| AWS Secrets and other privileged solution areas are a plus. Understanding of agentic AI systems| including binding AI agents to enterprise identities| least privilege enforcement| policy-based guardrails| Model Context Protocol (MCP)| mutual TLS| OAuth2 token exchanges| and AI security tools. Familiarity with API gateways| service meshes (Kong| Istio| Apigee)| and machine identity management (certificates| workload IDs| SPIFFESPIRE). Experience with IAM automation and administration using Terraform| Ansible| Cloud-init| Pulumi| Python| and UnixWindows systems. Strong proficiency in authentication technologies SSO| federation protocols (SAML| OIDC| OAuth2)| API authentication| SCIM| RBAC| ABAC| JIT provisioning| and zero-trust principles. Expertise in privileged access management| including credential vaulting| session management| and PAMPAW models. Skilled in directory services and multi-cloud identity governance (Azure AD| AWS AD| EntraID| Okta) and cloud IAM across AWS| Azure| and Google Cloud Platform. Awareness of open standards| threat modeling| insider threats| and continuous authentication. Strong organization| project delivery| communication| collaboration| and leadership skills. Desirable Skills: Keyword: Skills: Cyber Security - IAM Professional Services Experience Required: 8-10

For applications and inquiries, contact: [email protected]

Job Tags

Similar Jobs