AI IAM Architect

Responsibilities Discover AI/agent identity requirements across users, services, runtimes, tools, and APIs. Assess existing SSO, MFA, federation, and API authorization models; identify gaps in delegation, token lifecycle, scopes, secrets, and auditability. Design enterprise IAM patterns (user context propagation, delegation chains, BFF sessions, least-privilege access) and OAuth/OIDC client models. Define standards for securing agent tools, data access, and cross-domain integrations; align to zero trust and regulatory controls. Produce architecture artifacts (CAD/HLD/PSS) and reference implementations. Lead and build IAM POCs (end-to-end flows, token exchange, gateway enforcement, delegated agent access). Configure/test identity flows; troubleshoot tokens, scopes, and integrations. Implement or guide IAM integrations across gateways, BFFs, agent orchestration, and observability. Transition validated patterns to IAM engineering for production rollout. Define agent identity lifecycle (registration, credential rotation, revocation, environment separation). Integrate IAM across AI platform components; support CI/CD and IaC for IAM configurations. Establish patterns for human-in-the-loop controls, break-glass access, and rate limiting. Maintain documentation, decision records, diagrams, and runbooks. Deliver POC summaries, evaluations, and implementation guidance; communicate risks and dependencies. Ensure regulatory compliance; partner on threat modeling and controls (secrets, PAM, audit evidence). Requirements 10+ years in IAM, security architecture, or platform engineering with significant IAM scope. 2+ years building IAM POCs and troubleshooting OAuth 2.0 / OIDC flows (Auth Code+PKCE, refresh tokens, client credentials, token exchange, OBO). 2+ years with PingOne AIC and/or Microsoft Entra ID. #J-18808-Ljbffr Jobtailor