IAM EXPERT IN CYBERSECURITY - Agentic Identity Management

Stellantis; Betim; On-site; BRL 150,000 - 210,000; Full time

Job summary

Stellantis in Betim, Brazil, is seeking an IAM Expert in Cybersecurity focused on Agent Identity Management. The role concentrates on designing, governing, and operating identities used by AI agents and automation components within enterprise platforms.

The candidate will implement least-privilege access, lifecycle management, and auditable controls, collaborating with engineering and security teams onsite in Betim. Proficiency in IAM standards and English is required.

Qualifications

• Bachelor’s degree completed in a technology-related field.
• Advanced English proficiency.
• Availability to work onsite in Betim (MG), Brazil.
• Strong knowledge of identity lifecycle management for non-human identities.
• Experience with identity standards and protocols (OAuth2, OIDC, SAML, SCIM).

Responsibilities

• Design and build the Agent Identity Governance Framework, including standards, approval models, lifecycle rules, and access catalogs.
• Define and enforce the lifecycle of agent identities, including creation, onboarding, changes, and decommissioning.
• Design access models for agent identities using least privilege, separation of duties, and time-bound access.
• Define standard permission sets and guardrails for systems, APIs, and allowed operations.
• Integrate agent identities with privileged access management controls when required.
• Define break-glass and emergency procedures for agent workflows.
• Implement logging, monitoring, and audit-ready evidence for agent identity activities.
• Publish standards, guidelines, and operational runbooks for secure agent identity management.

Skills

Identity lifecycle mgmt

IAM concepts RBAC/ABAC

OAuth2/OIDC/SAML/SCIM

Privileged access patterns

API-based integrations

Advanced English

Education

Bachelor's degree in technology

Job description

IAM EXPERT IN CYBERSECURITY - Agentic Identity Management

• Betim, MG, BR (1 Vaga)

Stellantis is one of the global leaders in the development and production of automobiles and light commercial vehicles, as well as in providing mobility solutions. We are one of the world’s leading Mobility Tech Companies, bringing together iconic brands such as Fiat, Jeep, Peugeot, Citroën, RAM, and Abarth. With operations in nearly 30 countries and presence in over 130 markets, we offer clean, connected, accessible, and safe mobility solutions.

What drives us is the talent and diversity of our people, who transform passion and experience into value for our customers, communities, and partners every day. We are looking for individuals who are passionate about automobiles, technology, and innovation to join our team!

This role is part of the Cybersecurity team and focuses on the design, governance, and operation of identities used by AI agents and automation components. The person in this position will ensure secure, compliant, and auditable interactions between agentic systems and enterprise platforms, applying strong identity governance and least-privilege principles.

Main Responsibilities:

• Design and build the Agent Identity Governance Framework, including standards, approval models, lifecycle rules, and access catalogues;
• Define and enforce the lifecycle of agent identities, including creation, onboarding, changes, and decommissioning;
• Design access models for agent identities using least privilege, separation of duties, and time-bound access;
• Define standard permission sets and guardrails for systems, APIs, and allowed operations;
• Integrate agent identities with privileged access management controls when required;
• Define break-glass and emergency procedures for agent workflows;
• Implement logging, monitoring, and audit-ready evidence for agent identity activities;
• Publish standards, guidelines, and operational runbooks for secure agent identity management.

We expect you to have:

• Strong knowledge of identity lifecycle management for non-human identities;
• Solid understanding of identity and access management concepts such as RBAC, ABAC, entitlements, and approval workflows;
• Experience with identity standards and protocols such as OAuth2, OIDC, SAML, SCIM, and directory services;
• Knowledge of privileged access patterns, including just-in-time and just-enough access;
• Experience with API-based integrations and log analysis;
• Bachelor’s degree completed in a technology-related field or equivalent;
• Advanced English proficiency;
• Availability to work onsite in Betim (MG), Brazil.

It will be considered a plus if you have:

• Familiarity with policy-as-code and automation pipelines;
• Knowledge of identity risks related to AI and agentic systems;
• Experience with LLM-based applications and agent orchestration concepts;
• Understanding of secrets management and credential protection;
• Exposure to machine learning operations tooling.

At Stellantis, we assess candidates based on qualifications, merit, and business needs. We welcome applications from people of all gender identities, age, ethnicity, nationality, religion, sexual orientation, and disability. Diverse teams will allow us to better meet the evolving needs of our customers and care for our future.