Non-Human Identity Engineer

Amoria Bond; Amersfoort; On-site; EUR 90,000 - 130,000; Full time

Job summary

Amoria Bond is seeking a dedicated Non-Human Identity Engineer to manage machine identities across cloud environments. You will design, implement, and automate identity workflows, focusing on certificates, secrets, and lifecycle management to strengthen IAM/PAM controls.

In this role, you will collaborate with security, IT, and development teams, automate workflows, and participate in secure deployment practices. A proactive, inclusive culture supports training and growth.

Qualifications

• Proven experience with machine identity management and automation in complex cloud environments.
• Strong knowledge of IAM/PAM concepts and security best practices as they apply to non-human identities.
• Proficiency in scripting languages such as PowerShell and Python for automation and API integrations.
• Experience managing secrets, certificates, and lifecycle tools such as Vault or Secrets Manager.

Responsibilities

• Design, implement, and manage machine identity solutions across cloud platforms (Azure AD, AWS, GCP).
• Develop and maintain automation scripts to streamline identity lifecycle management.
• Collaborate with security, IT, and development teams to enforce IAM/PAM policies.
• Monitor and audit machine identity usage to detect anomalies and ensure compliance.
• Integrate identity solutions into CI/CD pipelines and cloud infrastructure.
• Stay current with advancements in identity security technologies and provide training.

Skills

Machine identity management

IAM/PAM concepts

PowerShell

Python

Security best practices

Automation

Cloud API integrations

Tools

HashiCorp Vault

AWS Secrets Manager

Certificate lifecycle management

Job description

We are hiring on behalf of an end-client who is seeking a dedicated and innovative Non-Human Identity Engineer. This role focuses on managing machine identities and securing non-human entities across various cloud environments. The position is critical to enhancing the client's identity and access management infrastructure, with an emphasis on automation, secrets management, and cloud identity security. The end-client values a diverse, equitable, and inclusive workplace and encourages candidates from all backgrounds to apply.

Responsibilities

• Design, implement, and manage machine identity solutions including service accounts, certificates, and secrets across cloud platforms such as Azure AD, AWS, and GCP.
• Develop and maintain automation scripts and tools using PowerShell, Python, and APIs to streamline identity lifecycle management and improve security posture.
• Collaborate with security, IT, and development teams to enforce IAM/PAM policies and ensure robust access controls for non-human identities.
• Monitor and audit machine identity usage to detect anomalies, mitigate risks, and ensure compliance with regulatory requirements.
• Participate in the design and deployment of scalable and secure identity management frameworks that integrate with existing cloud and on-premise infrastructure.
• Continuously assess emerging trends and technologies in machine identity management and cloud security to recommend improvements.
• Document processes, configurations, and best practices to support team knowledge sharing and operational continuity.

Qualifications

• Proven experience with machine identity management and automation in complex cloud environments (Azure AD, AWS, GCP).
• Strong knowledge of IAM/PAM concepts and security best practices as they apply to both human and non-human identities.
• Proficiency in scripting languages such as PowerShell and Python for automation and API integrations.
• Experience managing secrets, certificates, and lifecycle management tools such as HashiCorp Vault, AWS Secrets Manager, or equivalent.
• Understanding of cloud-native security principles, identity federation, and compliance requirements.
• Excellent problem-solving skills with a proactive approach to identify and mitigate security risks.
• Strong communication skills with the ability to collaborate effectively across diverse, cross-functional teams.

Day-to-Day

• Implement and manage automated workflows to provision, rotate, and revoke non-human identities.
• Conduct regular security reviews and audits of machine identity repositories and access logs.
• Work closely with developers and operations teams to integrate identity solutions into CI/CD pipelines and cloud infrastructure.
• Respond promptly to incidents related to machine identity threats or vulnerabilities, participating in root cause analysis and remediation.
• Attend team meetings to share knowledge, discuss challenges, and contribute to continuous improvement efforts.
• Stay current with advancements in identity security technologies and contribute to training and mentorship initiatives supporting an inclusive environment.

We are committed to equal opportunities and welcome applications from all suitably qualified candidates.