Senior Business Analyst - Machine Identity & Agentic AI Governance

Skills:

Business Analysis | IAM | Non-Human Identity (NHI) | Machine Identity | Agentic AI Governance | AI Governance | Cybersecurity | Identity Governance | OAuth | OIDC | SAML | SCIM | REST APIs | API Integration | AWS | Azure | GCP | Azure Key Vault | AWS Secrets Manager | HashiCorp Vault | Cloud Security | Requirements Gathering | Technical Documentation | Process Mapping

We are seeking a Senior Business Analyst – Machine Identity & Agentic AI Governance to support a high-visibility enterprise initiative focused on Non-Human Identity (NHI) governance, Machine Identity management, and secure adoption of Agentic AI .

As organizations increasingly deploy AI agents that interact with APIs, cloud platforms, SaaS applications, collaboration tools, databases, and internal systems, the number of machine and non-human identities continues to grow. This role will help establish scalable processes for securely provisioning, monitoring, governing, and retiring these identities.

The ideal candidate will bring strong experience in Business Analysis, Identity & Access Management (IAM), cybersecurity, cloud technologies, enterprise applications, and technical program delivery . The candidate must be comfortable working with engineers, architects, cybersecurity professionals, business stakeholders, and senior leadership.

Key Responsibilities

NHI Governance & Platform Implementation

• Drive business analysis and operational activities supporting the rollout of an NHI governance platform.
• Coordinate integrations with cloud platforms, identity providers, SaaS applications, APIs, and enterprise systems.
• Partner with IAM, Cloud, Security, and Engineering teams to establish NHI discovery, classification, ownership, and lifecycle processes.
• Define requirements for dashboards, alerts, metrics, and reporting related to machine identity posture and risk.
• Track implementation milestones, dependencies, risks, and operational readiness.

Machine Identity Governance

• Define intake, assessment, approval, and onboarding workflows for machine identities and AI-agent credentials.
• Develop lifecycle processes covering provisioning, access management, credential rotation, periodic access reviews, and decommissioning.
• Support governance of service accounts, API keys, OAuth tokens, secrets, certificates, and other non-human credentials.
• Identify stale, orphaned, excessive, or ungoverned machine identities and coordinate remediation.
• Help establish governance processes that balance cybersecurity requirements with business and engineering agility.

Agentic AI Governance

• Partner with AI and technology teams to support the secure adoption of Agentic AI across the enterprise.
• Analyze how AI agents authenticate and interact with enterprise applications, APIs, cloud services, and data platforms.
• Help define governance requirements for AI-agent identities, credentials, permissions, and access.
• Support AI governance, risk-management, security, and operational-readiness initiatives.
• Translate AI security and governance requirements into practical business and technical processes.

Business Analysis & Documentation

• Gather, analyze, validate, and document business and technical requirements.
• Develop Business Requirements Documents, Technical Requirements Documents, process flows, workflows, use cases, and acceptance criteria.
• Document current-state and future-state processes.
• Develop standards, procedures, runbooks, governance documentation, and operational processes.
• Conduct stakeholder interviews, working sessions, requirements workshops, and cross-functional meetings.
• Identify process gaps, dependencies, risks, and opportunities for automation.
• Define KPIs and metrics demonstrating governance coverage, risk reduction, and operational maturity.

Cross-Functional Collaboration

• Serve as a liaison between IAM, Cybersecurity, Cloud Operations, Enterprise Applications, Engineering, AI, and Business teams .
• Work with cybersecurity teams to translate policies and security requirements into actionable controls and workflows.
• Communicate program status, risks, dependencies, issues, and priorities to technical and business stakeholders.
• Facilitate alignment across multiple teams and drive issues toward resolution.
• Support executive-level reporting and program communications when required.

Required Qualifications

• Strong experience as a Senior Business Analyst supporting complex enterprise technology initiatives.
• Experience with Identity & Access Management (IAM) , Identity Governance, Machine Identity, or Non-Human Identity programs.
• Strong understanding of enterprise cybersecurity and access governance concepts.
• Experience gathering and documenting complex business and technical requirements.
• Experience creating requirements documents, process flows, workflows, design documentation, runbooks, and program artifacts.
• Strong understanding of APIs, REST integrations, cloud platforms, connectors, SCIM, and enterprise application integrations .
• Working knowledge of authentication and authorization technologies including OAuth, OIDC, SAML, and API keys .
• Experience working with AWS, Azure, or GCP environments.
• Understanding of machine identities, service accounts, credentials, secrets, and access permissions within cloud environments.
• Working knowledge of secrets-management solutions such as Azure Key Vault, AWS Secrets Manager, HashiCorp Vault , or similar technologies.
• Demonstrated experience working across multiple technical and business teams.
• Strong analytical, communication, documentation, organizational, and problem-solving skills.
• Ability to identify risks, dependencies, and issues and proactively drive resolution.
• Ability to communicate effectively with engineers, architects, cybersecurity professionals, business stakeholders, and senior leadership.

Preferred Qualifications

• Experience with Non-Human Identity (NHI) governance programs.
• Experience with NHI or secrets-security platforms such as Entro Security, Astrix, Elimity , or similar technologies.
• Exposure to Agentic AI, AI Agents, Generative AI, Multi-Agent Systems, or AI orchestration frameworks .
• Understanding of how AI agents authenticate and interact with enterprise applications and services.
• Experience with enterprise AI governance, cybersecurity governance, IAM, or identity-security programs.
• Experience in large, complex, highly regulated, or data-sensitive enterprise environments.
• Certifications such as CISSP, CCSP, IAM certifications, or cloud security certifications are a plus.