Identity & AI Security Architect — IAM Lead

LPL Financial; New York (NY); On-site; USD 123,000 - 204,000; Full time

Job summary

LPL Financial is seeking an AVP IAM AI Engineer to design, operate, and automate identity controls for both human and non-human actors. You will build runtime controls, secrets workflows, and governance guardrails to enable safe AI adoption and scale the team, embedding identity and AuthN/AuthZ in AI development from the start.

The role requires strong hands-on engineering, leadership experience, and collaboration with security and data science teams to deliver secure identity solutions across

Qualifications

• 5+ years in identity & access management or information security.
• Experience leading technical teams.
• 5+ years with Ping Identity (PingFederate/PingOne/PingAccess) or equivalent.
• 5+ years with SailPoint (IdentityIQ/Identity Security Cloud) or equivalent.
• 3+ years with Idira/CyberArk or HashiCorp Vault or equivalent.

Responsibilities

• Operationalize identity runtime controls across human and non-human identities.
• Governance for AI agents and non-human identities, including provisioning and deprovisioning.
• Develop and automate secrets-manager workflows for AI systems and agents.
• Define and enforce least-privilege authorization models as code.
• Establish reference patterns for identity flows in agentic systems.
• Partner with AI development teams on identity, AuthN/AuthZ and secrets handling.
• Support end-user IAM deployment where required.
• Integrate identity telemetry with SIEM/SOC and respond to incidents.
• Collaborate on governance, risk & compliance and audits.
• Recruit, mentor, and lead a team for IAM workstreams.

Skills

Python

Terraform

CI/CD

REST API

IAM

OIDC

OAuth 2.0

Kubernetes

Education

BS in CS/InfoSec

Tools

Ping Identity

SailPoint

CyberArk

HashiCorp Vault

AWS

Azure

GCP

Job description

LPL Financial is seeking an AVP IAM AI Engineer to design, operate, and automate identity controls for both human and non-human actors. You will build runtime controls, secrets workflows, and governance guardrails to enable safe AI adoption and scale the team, embedding identity and AuthN/AuthZ in AI development from the start.

The role requires strong hands-on engineering, leadership experience, and collaboration with security and data science teams to deliver secure identity solutions across