Agentic Identity Security Consultant

Directly related to securing AI agents and agent frameworks; involves prototyping with emerging standards and LLM/agent application work.

About the Role

Forward Deployed Engineer (Agentic Identity) role building and shipping production services to secure autonomous AI agents and non-human identities. The role focuses on designing and implementing agent registries, authorization engines, credential brokers, and runtime policy/attribution systems while working directly with clients in their environments.

Job Description

Role

Forward Deployed Engineer, Agentic Identity Platform (Agentic Identity Security Consultant) — hands-on technical role responsible for building production services and platforms to secure autonomous AI agents and non-human identities. You will design, implement, deploy, and operate components in the agentic identity stack and work directly with client environments.

Key Responsibilities

• Build and ship services in the agentic identity stack: authorization engines, agent registries, credential brokers, and authentication layers for MCP servers.
• Own components end-to-end: design, implementation, deployment, and incident response (including on-call responsibilities).
• Reverse-engineer identity behavior in client environments and design improved solutions.
• Prototype against emerging standards and vendor betas, often before documentation exists.
• Build internal tooling and reference implementations used across the practice.
• Explain and defend technical designs to client engineering teams.

Requirements

• Minimum 3 years professional experience building and shipping production software.
• Hands-on technical work within the last 18 months (production development, prototyping, or code review).
• Minimum 2 years professional development experience in at least one of: Python, Go, Rust, TypeScript, Java, or C++.
• Minimum 2 years building concurrent or distributed systems that ran in production.
• Minimum 2 years hands-on experience deploying and operating cloud infrastructure on AWS, Azure, or GCP, including containers and CI/CD pipelines.
• Bachelor’s degree in Computer Science (or equivalent) OR minimum 12 years work experience (Associate’s Degree requires minimum 6 years work experience).
• At least one production service or component owned end-to-end (design, implementation, deployment, operation).

Preferred / Bonus

• Experience with OAuth 2.0, OIDC, token exchange, SAML, SPIFFE, PKI, or mTLS.
• Experience with MCP, agent frameworks, or LLM application development.
• Experience in identity and access management, IGA, PAM, secrets management, or non-human identity.
• Applied cryptography experience.
• Participation in production on-call rotations.
• Strong judgment about when to use libraries, vendor products, or custom implementations.

Travel & Working Conditions

• Travel may be required (0–100% depending on business need and client requirements).
• Forward deployed work implies being in the room (possibly virtually) with clients while systems run in their environments.

Compensation & Location Notes

• State-specific annual salary ranges are provided for multiple U.S. locations (examples: California $70,350 to $205,800; Washington $80,200 to $189,300; Maine $54,400 to $151,400; New York $66,300 to $205,800). Exact compensation varies by office location, role, skill set, and experience.

Benefits (summary)

• Market-competitive benefits including medical, dental, vision, life, long-term disability, 401(k), bonus opportunities, paid holidays, and paid time off.

Skills

System Design Debugging Reverse Engineering Prototyping Client-facing Communication End-to-end Ownership Deployment & Operations On-call Incident Response Concurrent/Distributed Systems Judgment (tradeoffs vendor vs build) Technical Documentation and Explanation