IAM Architect

Job Description: Security Architect Agentic Identity & Access Management Location-Remote Role Overview We are looking for a Security Architect to design and lead security architecture for Agentic Identity & Access Management (IAM) capabilities. The role will focus on securing AI agents, autonomous workflows, machine identities, and human-to-agent interactions across enterprise environments.

Key Responsibilities

• Define security architecture and IAM patterns for AI agents, agentic workflows, APIs, workloads, and machine identities.
• Design authentication, authorization, identity lifecycle, privilege management, and access-control models for autonomous agents.
• Establish Zero Trust principles for agent-to-agent, agent-to-application, and agent-to-human interactions.
• Define controls for agent identity, credential/token management, delegation, impersonation, and least-privilege access.
• Develop policies for dynamic/risk-based authorization and context-aware access decisions.
• Integrate agentic IAM with enterprise IAM/PAM platforms, cloud environments, APIs, and security controls.
• Address security risks including agent identity spoofing, privilege escalation, excessive permissions, credential theft, and unauthorized autonomous actions.
• Define security guardrails, monitoring, auditability, and traceability for agent actions and decisions.
• Partner with engineering, IAM, cybersecurity, cloud, data, and AI teams to embed security into agentic solutions.
• Conduct architecture reviews, threat modeling, risk assessments, and security design reviews.
• Define reference architectures, security standards, patterns, and implementation guidelines.

Required Skills & Experience

• Strong understanding of IAM, IGA, PAM, RBAC/ABAC, OAuth 2.0, OIDC, SAML, API security, and Zero Trust.
• Experience designing security architectures for cloud and distributed environments.
• Understanding of AI/GenAI and agentic architectures, including AI agents, LLM applications, tool/API calling, and autonomous workflows.
• Experience with identity platforms such as Microsoft Entra ID, Okta, CyberArk, Ping, SailPoint, or equivalent technologies.
• Strong knowledge of cloud security across AWS, Azure, and/or Google Cloud Platform.
• Experience with threat modeling and security frameworks such as NIST, OWASP, and Zero Trust Architecture.

For applications and inquiries, contact:View email address on us.fitly.work