Identity Security Architect

• Design and implement automated agentic and AI security controls for agentic systems, including automated model access control, inference authorization, and rate limiting.
• Policy driven prompt/instruction validation and misuse detection.
• Automated enforcement of agent to agent authentication and authorization.
• Implement continuous, automated threat modeling for LLM pipelines, agent orchestration frameworks, AI gateways and inference services.
• Build secure by default reference architectures enforced via configuration as code, runtime policy engines, and automated security testing pipelines.
• Create Plugins, Hooks and Skills using Claude code and/or Microsoft AI foundry.
• Implement fully automated Secure SDLC pipelines integrating SAST, DAST, SCA, secrets detection, container scanning, and IaC scanning as well as AI specific security testing such as prompt injection and model misuse.
• Ensure security checks are triggered automatically via CI/CD and MLOps pipelines and enforced consistently across dev, test, and production.
• Automate security validation during design reviews, architecture reviews, and pre-release readiness checks.
• Design and operate automated SBOM and AI BOM pipelines with continuous generation and automated vulnerability, license, and provenance analysis including policy enforcement.
• Integrate SBOM and AI BOM outputs into CI/CD pipelines, deployment gates, and audit reporting workflows.
• Implement continuous, automated security monitoring across application runtimes, AI/ML inference services, and agent workflows.
• Develop automated security metrics and telemetry to measure vulnerability exposure, remediation velocity, and DevSecOps maturity.
• Automate security feedback loops generating actionable tasks feeding engineering backlogs for risk reduction.
• Technical influence and enablement including developing agentic AI workflow automation using Copilot Studio or Claude code and acting as technical authority on AI security automation and DevSecOps.
• Ability to interpret and secure code in multiple languages and integrate security tooling via APIs and pipelines.
• Familiarity with security intelligence ingestion and automation including CVE feeds, advisories, automated alerting, and remediation workflows.
• Strong understanding of cybersecurity, privacy, and AI governance requirements with experience translating them into automated controls.

• Bachelor's degree in Computer Science, Cybersecurity, IT Security, or equivalent experience.
• Experience in DevOps, SecOps, DevSecOps, or MLOps with a strong automation focus.
• Demonstrated success implementing automated Secure SDLC pipelines.
• Ability to evaluate code and architecture risk and remediate through automation.
• Familiarity with security frameworks and scoring systems including MITRE ATT&CK, CVSS, and CWE.
• Strong technical communication skills and cross functional influence.

For applications and inquiries, contact:View email address on us.fitly.work