Non Human Identity Specialist

Allegis Group; Hyderabad, Pune District, Bengaluru; Hybrid; INR 2,500,000 - 5,000,000; Full time

Job summary

Allegis Group in Hyderabad, India seeks an NHI Specialist to secure and govern non-human identities across cloud and on-prem environments. You’ll work hybrid across Hyderabad, Pune, Bengaluru, and Chennai, with 4+ years of experience, handling service accounts, API keys, certificates, workloads, and AI agents.

You will implement dynamic secrets, enforce least-privilege access, manage PKI, configure Cloud IAM, and automate via Python/PowerShell/Terraform, while documenting standards and

Qualifications

• 4+ years in identity security, PAM, or cloud security.
• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
• Hands-on with a secrets management platform (Conjur, Vault, or cloud-native).
• Strong IAM/PAM fundamentals and least-privilege enforcement.
• Experience with JIT access and transient credentials.
• Working knowledge of PKI and Cloud IAM (AWS/Azure/GCP).
• Solid understanding of OAuth 2.0, OIDC, and JWT.
• Familiarity with workload identity concepts.
• Scripting in Python, PowerShell, or API/SDK automation.
• Strong communication and documentation skills.

Responsibilities

• Implement and manage secrets management with rotation and dynamic secrets.
• Enforce least-privilege access for service accounts and automation identities.
• Implement JIT and ephemeral credential models.
• Manage PKI and certificate lifecycle for machine identities.
• Configure Cloud IAM and workload identity (SPIFFE/SPIRE, federation).
• Implement OAuth 2.0, OIDC, and JWT for service-to-service access.
• Discover, inventory, and risk-score non-human identities, remediate issues.
• Automate using Python, PowerShell, Terraform, and REST APIs; integrate with SIEM/CI/CD.
• Document standards and collaborate across security, platform, and app teams.

Skills

Identity security

PAM

Cloud security

Secrets management

IAM/PAM fundamentals

JIT access

PKI

Cloud IAM (AWS/Azure/GCP)

OAuth 2.0 / OIDC / JWT

Scripting (Python/PowerShell/API)

Communication & documentation

AI agent access control

Education

Bachelors or Masters in CS/InfoSec or related field

Tools

Conjur/Vault cloud-native secrets manager

CyberArk Conjur

HashiCorp Vault

Job description

Non-Human Identity (NHI) Specialist

Location: Hyderabad | Pune | Bengaluru | Chennai (Hybrid) Experience: 4+ years | Shift: 1:00 PM to 10:00 PM

Role summary

Secure and govern non-human identities such as service accounts, API keys, certificates, workloads, and AI agents, using PAM and cloud-native identity security practices.

Key responsibilities

• Implement and manage secrets management (CyberArk Conjur, HashiCorp Vault, Azure Key Vault, AWS Secrets Manager) with rotation and dynamic secrets
• Enforce least-privilege access for service accounts and automation identities
• Implement JIT and ephemeral credential models
• Manage PKI and certificate lifecycle for machine identities
• Configure Cloud IAM (AWS, Azure, GCP) and workload identity (SPIFFE/SPIRE, federation)
• Implement OAuth 2.0, OIDC, and JWT for service-to-service access
• Discover, inventory, and risk-score non-human identities, and remediate stale or over-privileged ones
• Automate using Python, PowerShell, Terraform, and REST APIs; integrate with SIEM and CI/CD
• Document standards and collaborate with security, platform, and application teams

Required skills

• 4+ years in identity security, PAM, or cloud security
• Bachelors or Masters degree in Computer Science, Information Security, or a related field
• Hands-on with a secrets management platform (Conjur, Vault, or cloud-native)
• Strong IAM/PAM fundamentals and least-privilege enforcement
• Experience with JIT access and transient credentials
• Working knowledge of PKI and Cloud IAM (at least one of AWS, Azure, GCP)
• Solid understanding of OAuth 2.0, OIDC, and JWT
• Familiarity with workload identity concepts
• Scripting in Python, PowerShell, or API/SDK automation
• Strong communication and documentation skills

Preferred skills

• AI agent access control experience
• CyberArk CDE, Vault Associate, or AWS/Azure security certifications
• Kubernetes, service mesh, or SPIFFE/SPIRE
• NHI discovery tools (Astrix, Oasis, Token, Clutch)