Identity & AI Security Engineer (Zero Trust)

Comcast; Mount Laurel Township (NJ); On-site; USD 104,959 - 157,438; Full time

Job summary

Comcast is seeking an experienced IAM Architect to drive the strategy, design, and operations of enterprise identity and access management solutions. You will work across Azure, AWS, and GCP, implementing secure authentication, federation, and Zero Trust-based controls for complex workloads and AI agents.

The role emphasizes hands‑on implementation, automation, and collaboration with security, platform, and application teams to advance identity security in modern cloud ecosystems.

Qualifications

• 5+ years of IAM experience in enterprise environments.
• Hands-on with Microsoft Entra ID Conditional Access Policies and workload identities.
• Strong experience with SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM.
• Knowledge of Agentic AI technologies and multi-cloud IAM concepts.
• Zero Trust principles across users, apps, APIs, workloads, and AI agents.
• Experience across Azure, AWS, and GCP environments.
• IAM automation using PowerShell, Python, REST APIs, and Terraform.

Responsibilities

• Architect, deploy, and maintain IAM solutions across multi‑cloud environments.
• Design secure authentication and authorization architectures for modern apps and APIs.
• Implement agent identity frameworks and workload identity federation.
• Collaborate with security and engineering teams to integrate identity controls.
• Monitor, troubleshoot, and resolve complex authentication/authorization issues.
• Develop technical documentation, guides, and diagrams for identity projects.

Skills

AI Agent Security

Microsoft Entra ID

Zero Trust Architecture

Identity Access Management

Adaptability

Critical Thinking

OpenID Connect

Education

Bachelor's Degree

Job description

Comcast is seeking an experienced IAM Architect to drive the strategy, design, and operations of enterprise identity and access management solutions. You will work across Azure, AWS, and GCP, implementing secure authentication, federation, and Zero Trust-based controls for complex workloads and AI agents.

The role emphasizes hands‑on implementation, automation, and collaboration with security, platform, and application teams to advance identity security in modern cloud ecosystems.