Non-Human Identity (NHI) Specialist

Alignity Solutions; Hyderabad; Híbrido; INR 1.800.000 - 3.200.000; Jornada completa

Descripción de la vacante

Alignity Solutions seeks a Non-Human Identity (NHI) Specialist to design and implement modern identity security controls for machines, services, applications, and AI agents. You will blend PAM expertise with cloud-native security, governing secrets, certificates, and non-human credentials with robust IAM practices.

The role covers JIT credentials, PKI lifecycle, workload identity, and guardrails for AI agents, across cloud/on-prem environments.

Formación

• Bachelor's or Master's degree in Computer Science, Information Security, or related field.
• Hands-on experience with secrets management platforms (CyberArk Conjur, HashiCorp Vault, or cloud-native equivalents).
• Experience with IAM/PAM concepts including roles, policies, entitlements, and least-privilege enforcement.
• Practical experience implementing Just-In-Time access and ephemeral credential models.
• Proficiency in building NHI remediation and governance programs, including inventory, risk scoring, and lifecycle management of non-human identities.
• Working knowledge of PKI/certificate lifecycle management.
• Practical experience with Cloud IAM across at least one major provider (AWS, Azure, or GCP).
• Familiarity with OAuth 2.0, OpenID Connect, and JWT token-based authentication.

Responsabilidades

• Design, implement, and manage secrets management solutions (e.g., CyberArk Conjur, HashiCorp Vault, Azure KeyVault, AWS Secrets Manager).
• Architect and enforce least-privilege IAM/PAM policies, roles, and entitlements.
• Implement Just-In-Time (JIT) and ephemeral credential models to eliminate persistent privileged access for non-human identities.
• Manage Certificate/PKI lifecycle for machine and workload identities.
• Configure and govern Cloud IAM across AWS, Azure, and GCP.
• Implement OAuth 2.0, OpenID Connect, and JWT-based authentication/authorization flows.
• Design and deploy Workload Identity solutions to eliminate long-lived credentials.
• Establish access control frameworks and guardrails for AI agents and autonomous systems.
• Document architecture, standards, and runbooks; collaborate with security, platform, and application teams.

Conocimientos

IAM concepts

PAM concepts

Just-In-Time access

Least-privilege enforcement

Communication skills

Educación

Bachelor's or Master's in CS/InfoSec

Herramientas

CyberArk Conjur

HashiCorp Vault

Azure Key Vault

AWS Secrets Manager

Descripción del empleo

Do you love a career where you Experience, Grow & Contribute at the same time, while earning at least 10% above the market? If so, we are excited to have bumped onto you.

Learn how we are redefining the meaning of work, and be a part of the team raved by Clients, Job-seekers and Employees.

If you are a Non-Human Identity (NHI) Specialist looking for excitement, challenge and stability in your work, then you would be glad to come across this page.

We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long-term project. Here are a few details.

Check if you are up for maximizing your earning/growth potential, leveraging our Disruptive Talent Solution.

Role:Non-Human Identity (NHI) Specialist
Location: HYDERABAD | BANGALORE | PUNE | CHENNAI | MUMBAI | GURUGOAN | KOLKOTTA
Experience: 3-8 Years
Employment Type: Contract to hire
Work Mode:Hybrid
Notice Period: 0-30 days (If you have negotiable notice period or buyout option, please apply)

Requirements

Non-HumanIdentity (NHI) Specialist

We are seeking a Non-Human Identity (NHI) Specialistto design and implement modern identity security controls for machines,services, applications, and AI agents. This role blends traditional PrivilegedAccess Management (PAM) expertise with modern cloud-native and workloadidentity security, ensuring secrets, certificates, and non-human credentialsare governed with the same rigor as human identities.

Responsibilities

• Design, implement, and managesecrets management solutions (e.g., CyberArk Conjur, HashiCorp Vault, Azure KeyVault, AWS Secrets Manager) including secret rotation, dynamic secrets, andvaulting policies
• Architect and enforceleast-privilege IAM/PAM policies, roles, and entitlements for service accounts,applications, and automation identities
• Implement Just-In-Time (JIT), andephemeral credential models to eliminate persistent privileged access fornon-human identities
• Manage Certificate/PKI lifecycle(issuance, rotation, revocation) for machine and workload identities
• Configure and govern Cloud IAMacross AWS, Azure, and GCP, including IAM roles and cross-account access (AWS),service principals and managed identities (Azure), and service accounts withworkload identity federation (GCP)
• Implement OAuth 2.0, OpenIDConnect, and JWT-based authentication/authorization flows forservice-to-service and API access
• Design and deploy Workload Identitysolutions (e.g., SPIFFE/SPIRE, Kubernetes service accounts, cloud workloadidentity federation) to eliminate long-lived credentials
• Establish access control frameworksand guardrails for AI agents and autonomous systems, including scopedpermissions, audit trails, and behavioral monitoring
• Establish continuous discovery ofnon-human identities (service accounts, API keys, tokens, certificates,secrets) through automated tooling or repeatable processes across cloud,on-prem, CI/CD, and SaaS environments
• Build, analyze and maintain NHIinventory, risk scoring, and remediation programs to identify and eliminateorphaned, over-privileged, or stale non-human credentials
• Onboard and integrate platforms(cloud, on-prem, containers, databases) into NHI/PAM governance frameworks
• Develop automation usingPowerShell, Python, Terraform, and REST APIs for identity provisioning,rotation, and compliance reporting
• Support integrations with SIEM,MFA, CI/CD pipelines, and secret scanning tools
• Conduct risk assessments and driveremediation of non-human identity findings across the enterprise
• Document architecture, standards,and runbooks; collaborate with security, platform, and application teams

RequiredQualifications

• Bachelor's or Master's degree inComputer Science, Information Security, or related field
• Hands‑on experience with secretsmanagement platforms (CyberArk Conjur, HashiCorp Vault, or cloud-nativeequivalents)
• Experience with IAM/PAM conceptsincluding roles, policies, entitlements, and least-privilege enforcement
• Practical experience implementingJust-In-Time access, andephemeral credential/session models
• Proficiency building NHIremediation and governance programs, including inventory, risk scoring, andlifecycle management of non-human identities
• Working knowledge ofPKI/certificate lifecycle management
• Practical experience with Cloud IAMacross at least one major provider (AWS, Azure, or GCP)
• Solid understanding of OAuth 2.0,OpenID Connect, and JWT token-based authentication
• Familiarity with workload identityconcepts (SPIFFE/SPIRE, managed identities, federated identity)
• Proficiency in PowerShell, Python,or API/SDK-based automation
• Strong communication,documentation, and cross-team collaboration skills

PreferredQualifications

• Experience securing AIagent/agentic workflows, including scoped credential issuance and runtimeaccess control
• Certifications: CyberArk CDE,AWS/Azure Security certifications, HashiCorp Vault Associate
• Experience with Kubernetes secrets,service mesh identity (Istio/Linkerd), or SPIFFE/SPIRE
• Background in DevSecOps, CI/CDpipeline security, or secret scanning tooling
• Experience deploying or operatingNHI discovery tooling (Token, Astrix, Oasis, Clutch etc. ) to continuouslyidentify and inventory non-human identities across environments