AI Identity Security Engineer (SailPoint)

Salary: $109,086.45 - 142,750 per year Requirements:

• We require a high school diploma or GED plus six years of related post-secondary education and/or experience in Information Security or Information Technology.
• We prefer candidates with two years of relevant DevSecOps experience.
• We value AWS DevOps or Azure DevOps certification.
• Experience building and deploying cloud-native applications in OpenShift or Azure Kubernetes Service (AKS) is preferred.
• Familiarity with secrets management platforms such as HashiCorp Vault is preferred.
• We look for familiarity with applying chaos engineering principles in CI/CD pipelines.
• Experience using testing tools to support automation and integrating them into delivery pipelines is preferred.
• We need strong knowledge of cloud infrastructure, networking, services, and cloud architecture patterns.
• We prefer proficiency in Python.
• Working knowledge of Jenkins, Azure DevOps, Ansible, Terraform, Packer, Git, and ServiceNow is a plus.
• We value the ability to interpret and ensure compliance with applicable rules, regulations, and industry guidance.
• Preferred experience includes identity governance automation, IAM, or DevSecOps, along with familiarity with AI/ML systems, agentic architectures, and related security considerations.
• Hands-on experience with SailPoint customization and custom code development is preferred.
• Proven success automating access reviews and certification workflows for non-human identities is preferred.
• Advanced proficiency in SQL and Java is preferred.

• We help release candidate CI/CD pipelines that define the states and steps required to identify release readiness for each application and service.
• We design and build fully automated CI/CD pipelines that enable cloud deployments, including infrastructure, service, and application build and deployment automation.
• We ensure pipeline components follow strong software engineering practices, including automated testing for both code and infrastructure.
• We create tools that reduce mistakes and improve customer experience.
• We assist with troubleshooting production issues and produce clear documentation and metrics to support root cause analysis.
• We develop and test Ansible playbooks, Terraform scripts, and Packer scripts, while supporting immutable infrastructure approaches.
• We collaborate with Enterprise Architecture, Information Security, Software Delivery, and Quality Assurance to help the organization move to the cloud through full automation.
• We partner across Technology, Operations, Digital, and Data to ensure controls are designed, implemented, and monitored to support risk management, compliance, and cybersecurity.
• We apply disciplined change management by assessing risk and control impacts when making process, system, product, or service changes.
• We own the lifecycle and access governance foundation for AI agents and non-human identities within SailPoint and enterprise IAM systems.
• We establish and scale access review, certification, and provisioning workflows for AI and agentic use cases.
• We mature identity governance for non-human identities, including onboarding, entitlement management, and automated deprovisioning controls.
• We work with security, authorization, and platform teams to align lifecycle controls with runtime enforcement and policy decision points.
• We drive the roadmap for centralized governance of agent identity, access, and compliance across cloud environments.

• AI
• AI Agents
• AWS
• Ansible
• Azure
• CI/CD
• Cloud
• DevSecOps
• DevOps
• Git
• IAM
• Support
• Java
• Jenkins
• Kubernetes
• OpenShift
• Python
• SQL
• Security
• ServiceNow
• Terraform
• Marketing
• Serverless

More:

We are Regions, and we believe associates deserve more than just a job. We offer performance-driven people the opportunity to build a career with strong prospects for growth, quality work, and meaningful advancement. This is a full-time Cloud DevSecOps Engineer role based out of our Riverchase Operations Center in Hoover, Alabama. The position is currently offsite, ideally for someone located near one of our Regions offices within our retail branch footprint, with occasional on-site visits for meetings or events as needed. We offer a flexible, comprehensive benefits package that includes paid vacation and sick time, 401(k) with company match, medical, dental, and vision coverage, disability benefits, HSA and FSA options, life insurance, parental leave, an employee assistance program, and an associate volunteer program. We are an equal opportunity employer, including disabled veterans.

last updated 33 week of 2026