IAM Automation & DevOps Engineer(AI)

Centraprise; Boston (MA); On-site; USD 120,000 - 150,000; Full time

Job summary

Centraprise is looking for a Senior IAM Automation & DevOps Engineer in Boston, MA. This hands-on role involves designing and automating identity frameworks with a focus on Zero Trust architecture, workload identity, and AI security integrations.

The ideal candidate will possess strong skills in scripting, identity automation, and have experience with SPIFFE and SPIRE. Join us to build secure ecosystems for our global infrastructure.

Qualifications

• Strong practical understanding of Zero Trust Architecture.
• Proven experience in identity-centric security.
• Scripting proficiency in Python, Go, or PowerShell.
• Experience with CI/CD pipelines for IAM workflows.

Responsibilities

• Design and maintain identity solutions as code.
• Build automation pipelines to eliminate manual processes.
• Implement Zero Trust architectures for secure access.
• Standardize Non-Human Identities using advanced patterns.
• Develop AI security protocols for identity protection.

Skills

Zero Trust Architecture

Identity-centric security

Python

Go

PowerShell

CI/CD pipelines

SPIFFE

SPIRE

Job description

Job Title: IAM Automation & DevOps Engineer

Duration: Long term

Note: Hands-on AI/MCP builder experience (agent/tool integrations, identity-driven permissions)

Role Overview

We are seeking a Senior Identity Access Management (IAM) Engineer who approaches identity through the lens of software engineering and systems architecture rather than traditional administration. The ideal candidate doesn't just manage tools; they build ecosystems. You will be responsible for designing and automating robust identity frameworks that secure our global infrastructure, with a heavy focus on Zero Trust, Workload Identity (NHI), and the emerging frontier of AI Security.

Key Responsibilities

• Engineering over Administration: Move beyond "clicking buttons" in consoles. Design, develop, and maintain identity solutions as code.
• Identity Automation: Build and scale automation pipelines and custom tooling from scratch to eliminate manual touchpoints in the identity lifecycle.
• Architecture & Strategy: Implement Zero Trust architectures that verify every request, regardless of origin, ensuring seamless and secure access across the enterprise.
• Workload Identity: Standardize and secure Non-Human Identities (NHI) using advanced patterns like SPIFFE/SPIRE.
• AI Integration: Develop security protocols for AI agents and large language models (LLMs), protecting both the AI itself and the identities it interacts with.

Qualifications

1. Zero Trust & Identity Strategy
   • Strong practical understanding of Zero Trust Architecture (ZTA).
   • Proven experience moving organizations away from perimeter-based security to identity-centric security.
2. Identity Automation & DevOps
   • Engineering mindset: Ability to treat identity infrastructure as code (IaC).
   • Scripting & Development: Advanced proficiency in languages such as Python, Go, or PowerShell.
   • Tooling: Experience developing custom tools and CI/CD pipelines to automate complex IAM workflows.
3. Workload & Non-Human Identity (NHI)
   • Deep familiarity with NHI governance concepts.
   • Hands-on experience with SPIFFE (Secure Production Identity Framework for Everyone) and SPIRE (the SPIFFE Runtime Environment).
   • Experience managing certificates, secrets, and short-lived credentials at scale.
4. AI Security & Innovation
   • Practical experience securing AI agents and machine learning workflows.
   • Understanding the unique challenges of protecting non-human identities in an AI-driven environment.

Legal and Equal Opportunity Statement (Optional)

This position is open to all qualified candidates. Equal Opportunity Employer.