Agentic Identity & Access Management Architect

KellyMitchell Group; Dallas (TX); Remoto; USD 140.000 - 190.000; Tempo pieno

Descrizione del lavoro

Travel & Hospitality Provider seeks an Agentic Identity & Access Management Architect to shape target-state IAM architecture for AI agents, tools, APIs and users.

Role covers design of authorization patterns for machine-to-machine, agent-to-tool and agent-to-agent interactions, plus policy enforcement for least privilege and Zero Trust across cloud environments. Remote 12-month contract.

Competenze

• Deep enterprise IAM architecture and integration experience including PAM and directory services.
• Experience designing OAuth 2.0/OIDC and authorization flows for non-human/non-human entities.
• Knowledge of least privilege, Zero Trust, policy enforcement and runtime governance.
• Cloud IAM experience across AWS and Azure/hybrid environments.
• Proficiency with IAM/IGA/PAM or secrets-management platforms listed.

Mansioni

• Define target-state identity, authorization and governance architecture for AI applications and users.
• Design reusable authorization patterns for machine-to-machine and agent interactions.
• Establish policies for least privilege and runtime decisioning.
• Define lifecycle for AI agents and non-human identities and evidence retention.
• Develop standards for OAuth 2.0, OIDC, token exchange and short-lived credentials.
• Evaluate capabilities, document tradeoffs and risks, and provide adoption guidance.
• Create reference architectures and roadmaps; connect agent actions to identities.

Conoscenze

IAM architecture

PAM

OAuth 2.0/OIDC

Non-human identity

Least privilege

Cloud IAM

Secrets management

Reference architectures

Stakeholder leadership

Formazione

College degree in Technology, Information Security, Business, Finance, or equivalent professional experience

Strumenti

SailPoint ISC

SailPoint IdentityNow

Ping Identity

CyberArk

Entra ID

HashiCorp Vault

AWS Secrets Manager

Descrizione del lavoro

Job Summary

Our client, a leading Travel and Hospitality provider, is seeking a Agentic Identity & Access Management Architect to join their team.

Contract Details

Contract type and duration: 12 Month

Location: USA

Work Model: Remote

Core Responsibilities

• Define target-state identity, authorization and governance architecture for AI applications, agents, tools, APIs, systems and users.
• Design reusable authorization patterns for user-to-agent, agent-to-tool, machine-to-machine and agent-to-agent interactions.
• Establish policies for least privilege, Zero Standing Privilege, separation of duties, context-aware access, runtime decisions and human approval.
• Define the full lifecycle for AI agents and non-human identities, including ownership, credentials, rotation, recertification, suspension, deprovisioning and evidence retention.
• Develop standards for OAuth 2.0, OIDC, token exchange, workload identity, delegated authorization, service accounts and short-lived credentials.
• Evaluate native and vendor capabilities and document tradeoffs, risks, integration impacts and recommendations.
• Create reference architectures, control requirements, design decisions, roadmaps and adoption guidance.
• Define logging and traceability that connect an agent action to its identity, owner, delegated user/system, authorization decision and affected resource.
• Partner across IAM, IGA, PAM, cloud security, application security, AI engineering, AI governance and enterprise architecture

Required Skills/Experience (Must-Haves)

• Deep enterprise IAM architecture and integration experience, including strong hands-on knowledge of PAM, directory services, workforce IAM and customer identity patterns
• Experience designing OAuth 2.0/OIDC and authorization flows for machine-to-machine, workload or agent-based interactions
• Practical knowledge of non-human identity and AI-agent lifecycle governance
• Strong understanding of least privilege, Zero Trust, Zero Standing Privilege, policy enforcement, runtime governance and auditability
• Cloud IAM experience across AWS and/or Azure/hybrid environments
• Experience with major IAM, IGA, PAM or secrets-management platforms such as SailPoint ISC, SailPoint Entro, Ping Identity, CyberArk, Entra ID, HashiCorp Vault or AWS Secrets Manager
• Ability to produce reference architectures and translate complex IAM decisions for engineers, product teams and leadership
• Experience leading cross-functional stakeholders toward implementable solutions in a complex enterprise environment

Preferred Skills/Experience (Nice-to-Haves)

• College degree in Technology, Information Security, Business, Finance, or equivalent professional experience
• Experience with SailPoint Identity Security Cloud and SailPoint IdentityNow/Identity Governance solutions
• Knowledge of CyberArk privileged access management (PAM), secrets management, and CyberArk Identity capabilities
• Experience with the Ping Identity Platform, including authentication, federation, and identity access management solutions
• Familiarity with AWS IAM and cloud identity/security best practices within AWS environments
• Experience with Microsoft Entra ID and Microsoft Azure AI Foundry (formerly Azure AI Studio)
• Exposure to CrowdStrike capabilities related to endpoint, identity, and agent security monitoring
• Familiarity with the NIST AI Risk Management Framework (AI RMF) and OWASP guidance for LLM, generative AI, and autonomous-agent security
• Consulting experience and exposure to SAFe or other large-scale Agile delivery frameworks
• Experience supporting enterprise AI security, identity governance, or cloud security initiatives

Key Competencies & Behaviors

• AI Security Threat Analysis
• Threat Detection Optimization
• Security Monitoring Excellence
• Adversarial Thinking Mindset
• Incident Response Readiness
• Identity & Access Security
• Cloud Security Expertise
• Security Architecture Insight