AI IAM Architect: Secure Identity for AI Platforms

LPL Financial; San Diego (CA); Hybrid; USD 123,000 - 204,000; Full time

Benefits offered by this job

401K matching

Employee stock options

Paid time off

Volunteer time off

Health benefits

Job summary

LPL Financial is seeking an IAM Architect focused on AI workloads and agent integrations. You will design secure identity patterns, lead POCs, and collaborate with AI engineering teams to ensure safe runtimes and access across platforms.

The role emphasizes building Auth Code + PKCE, token exchange patterns, and governance aligned with zero-trust principles. Hybrid work options and enterprise‑scale IAM delivery are core expectations.

Qualifications

• 6+ years in IAM, security architecture, or platform engineering with significant IAM scope.
• 2+ years building IAM POCs and troubleshooting OAuth 2.0 / OIDC flows (Auth Code + PKCE, refresh tokens, client credentials, token exchange, OBO).
• 2+ years with PingOne AIC and/or Microsoft Entra ID.

Responsibilities

• Discover AI/agent identity requirements across users, services, runtimes, tools, and APIs.
• Assess existing SSO, MFA, federation, and API authorization models; identify gaps in delegation, token lifecycle, scopes, secrets, and auditability.
• Design enterprise IAM patterns (user context propagation, delegation chains, BFF sessions, least‑privilege access) and OAuth/OIDC client models.
• Define standards for securing agent tools, data access, and cross‑domain integrations; align to zero trust and regulatory controls.
• Produce architecture artifacts (CAD/HLD/PSS) and reference implementations.
• Lead and build IAM POCs (end‑to‑end flows, token exchange, gateway enforcement, delegated agent access).
• Configure/test identity flows; troubleshoot tokens, scopes, and integrations.
• Implement or guide IAM integrations across gateways, BFFs, agent orchestration, and observability.
• Evaluate and implement scalable Non‑Human Identity (NHI) and secrets management solutions for agents and autonomous workloads, including credential issuance, rotation, and revocation.

Skills

IAM architecture

OAuth/OIDC

APIs & microservices

Zero trust

Agent identity

Tools

PingOne AIC

Entra ID

Job description

LPL Financial is seeking an IAM Architect focused on AI workloads and agent integrations. You will design secure identity patterns, lead POCs, and collaborate with AI engineering teams to ensure safe runtimes and access across platforms.

The role emphasizes building Auth Code + PKCE, token exchange patterns, and governance aligned with zero-trust principles. Hybrid work options and enterprise‑scale IAM delivery are core expectations.