AVP IAM AI Engineer: Lead Identity for AI-Driven Security

LPL Financial

Tempe (AZ)

On-site

USD 123,000 - 204,000

Full time

13 days ago

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

LPL Financial is seeking an AVP, IAM AI Engineer to design, operationalize, and automate identity controls for human and non-human actors, including AI agents. You will build runtime controls, secrets workflows, and governance guardrails to enable safe AI adoption while scaling the team.

Embedded in AI app development from the outset, you will ensure AuthN/AuthZ and secure secrets handling, lead a new team, and collaborate with engineering and data science to implement robust IAM across cloud

Qualifications

5+ years in identity & access management or information security, including hands-on engineering.
Proven experience building and/or leading technical teams.
5+ years with PingFederate/PingOne/PingAccess or a comparable access-management platform.
5+ years with SailPoint IdentityIQ or Identity Security Cloud or a comparable IGA platform.
3+ years with Idira (CyberArk, formerly Conjur) / HashiCorp Vault or a comparable secrets-management platform.

Responsibilities

Identity runtime controls. Operationalize and automate identity runtime controls across human and non-human identities, including real-time authentication, authorization, and policy enforcement.
NHI & agentic governance. Design, build, and automate governance controls for AI agents and non-human identities — covering provisioning, entitlement, rotation, certification/attestation, and deprovisioning.
Secrets management for AI. Develop and automate secrets-manager workflows for AI systems and agents, including secret rotation, just-in-time and ephemeral credentials, and secure secret delivery to workloads.
Least privilege & policy-as-code. Define and enforce fine-grained, least-privilege authorization models for agents and workloads, expressed as policy-as-code wherever possible.
Reference architecture & standards. Establish standards and reference patterns for how identity flows through agentic systems — user-to-agent, agent-to-agent (A2A), and workload-to-service authentication and authorization.
Embedded in AI development. Partner with engineering and data science teams on all new AI application development, ensuring identity, AuthN/AuthZ, and secrets handling are designed in from the start.
End-user IAM deployment. Support the deployment and adoption of IAM controls for end users where required.
Monitoring & response. Integrate identity telemetry with SIEM/SOC tooling; build monitoring and anomaly detection for NHI/agent behavior; support incident response for compromised or misused credentials.
Governance, risk & compliance. Partner with GRC, risk, and audit stakeholders to ensure controls satisfy regulatory and internal requirements, and to produce audit evidence.
Team building & leadership. Recruit, build, mentor, and lead a team to support these workstreams; set technical direction and roadmap for NHI and agentic IAM.