Identity Security & Machine-Identity Specialist

Kemper Corporation; Downers Grove (IL); Hybrid; USD 80,000 - 133,000; Full time

Benefits offered by this job

Hybrid work

Medical, Dental, Vision

PTO

401k

Job summary

Kemper Corporation in Illinois is seeking an Identity Security & Non-Human Identity Analyst to build and operate security controls for non-human identities, including service accounts, workload identities, bots, and certificates. The role requires hands-on credential engineering, automation, and governance within a cloud/DevOps context.

The position works hybrid out of the Chicago or Downers Grove Kemper office. Salary range is $79,500 to $132,900, with consideration of experience and location.

Qualifications

• 5+ years of IAM, cloud security, DevOps/DevSecOps, or related experience.
• Hands-on experience with non-human identities, secrets, and workload identities.
• Experience with secrets managers, vaults, and credential-management platforms.
• Strong knowledge of cloud IAM, Kubernetes, APIs, and infrastructure-as-code.
• Ability to translate machine-identity exposure into business risk.

Responsibilities

• Discover and classify service accounts, workloads identities, bots, API keys, tokens, certificates, workload identities, and other machine identities.
• Establish authoritative inventory, ownership, criticality, lifecycle status, and reconciliation across cloud, directories, CMDB, secrets platforms, and applications.
• Engineer secure secrets, key, token, and certificate creation, storage, rotation, expiration, revocation, and monitoring processes.
• Partner with cloud and DevOps teams on workload identity, managed identities, service principals, Kubernetes identities, CI/CD credentials, and infrastructure-as-code controls.
• Identify stale, orphaned, embedded, overprivileged, or unmanaged credentials and drive risk-based remediation.
• Implement least privilege, ownership certification, usage analytics, exception management, and governance for machine identities.
• Build APIs, scripts, onboarding patterns, automated rotation, dashboards, and service metrics to scale the capability.

Skills

Non-human identities

Secrets management

Cloud IAM

CI/CD

Automation

Education

Bachelor's degree in Cybersecurity or related

Tools

Secrets managers

Vaults

Certificate lifecycle technologies

Kubernetes

Job description

Kemper Corporation in Illinois is seeking an Identity Security & Non-Human Identity Analyst to build and operate security controls for non-human identities, including service accounts, workload identities, bots, and certificates. The role requires hands-on credential engineering, automation, and governance within a cloud/DevOps context.

The position works hybrid out of the Chicago or Downers Grove Kemper office. Salary range is $79,500 to $132,900, with consideration of experience and location.