Identity Security & Non-Human Identity Analyst

Kemper Corporation; Dallas (TX); Hybrid; USD 80,000 - 133,000; Full time

Benefits offered by this job

Health insurance

Dental coverage

Vision coverage

401(k) plan

Tuition assistance

Paid time off

Job summary

Kemper is seeking an Identity Security & Non-Human Identity Analyst to design and operate security controls for non-human identities, including service accounts, workload identities, bots, keys and certificates. The role emphasizes cloud/DevOps proficiency, credential engineering, automation, and risk-based governance.

Ideal candidates have 5+ years in IAM/cloud security, hands-on work with secrets and workload identities, and a Bachelor's degree in a related field.

Qualifications

• 5+ years of IAM, cloud security, DevOps/DevSecOps, infrastructure security, or related experience.
• Hands-on work with non-human identities, secrets, keys, certificates, or workload identity.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Cloud Computing, or equivalent.

Responsibilities

• Discover and classify service accounts, application identities, bots, API keys, tokens, certificates, workload identities, and other machine identities.
• Establish authoritative inventory, ownership, criticality, lifecycle status, and reconciliation across cloud, directories, CMDB, secrets platforms, and applications.
• Engineer secure secrets, key, token, and certificate creation, storage, rotation, expiration, revocation, and monitoring processes.
• Partner with cloud and DevOps teams on workload identity, managed identities, service principals, Kubernetes identities, CI/CD credentials, and infrastructure-as-code controls.
• Identify stale, orphaned, embedded, overprivileged, or unmanaged credentials and drive risk-based remediation.
• Implement least privilege, ownership certification, usage analytics, exception management, and governance for machine identities.
• Build APIs, scripts, onboarding patterns, automated rotation, dashboards, and service metrics to scale the capability.

Skills

IAM

Cloud security

DevOps/DevSecOps

Kubernetes identities

Scripting/API automation

Education

Bachelor's degree in Cybersecurity / CS / IT / Eng / Cloud Computing

Tools

Kubernetes

CI/CD tools

Secrets management platforms

Job description

Location(s) Dallas, Texas, Jacksonville, Florida, P&C-Butterfield Road-Downers Grove-IL-AAC Details

Kemper is one of the nation’s leading specialized insurers. Our success is a direct reflection of the talented and diverse people who make a positive difference in the lives of our customers every day. We believe a high-performing culture, valuable opportunities for personal development and professional challenge, and a healthy work-life balance can be highly motivating and productive. Kemper’s products and services are making a real difference to our customers, who have unique and evolving needs. By joining our team, you are helping to provide an experience to our stakeholders that delivers on our promises.

Position Summary

Kemper is seeking an Identity Security & Non-Human Identity Analyst to work at our office in Illinois. The analyst builds and operates security controls for non-human identities, including service accounts, workload identities, bots, service principals, secrets, keys, tokens, and certificates. The role requires deep cloud/DevOps and identity lifecycle knowledge, hands-on secrets/credential engineering, automation, and risk-based governance.

Position Responsibilities

• Discover and classify service accounts, application identities, bots, API keys, tokens, certificates, workload identities, and other machine identities.
• Establish authoritative inventory, ownership, criticality, lifecycle status, and reconciliation across cloud, directories, CMDB, secrets platforms, and applications.
• Engineer secure secrets, key, token, and certificate creation, storage, rotation, expiration, revocation, and monitoring processes.
• Partner with cloud and DevOps teams on workload identity, managed identities, service principals, Kubernetes identities, CI/CD credentials, and infrastructure-as-code controls.
• Identify stale, orphaned, embedded, overprivileged, or unmanaged credentials and drive risk-based remediation.
• Implement least privilege, ownership certification, usage analytics, exception management, and governance for machine identities.
• Build APIs, scripts, onboarding patterns, automated rotation, dashboards, and service metrics to scale the capability.

Position Qualifications

• 5+ years of IAM, cloud security, DevOps/DevSecOps, infrastructure security, or related experience
• Substantial hands‑on work experience with non-human identities, secrets, keys, certificates, or workload identity.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Cloud Computing, or a related discipline, or equivalent relevant professional experience.
• Hands‑on experience managing secrets, keys, certificates, service accounts, service principals, or workload identities.
• Experience with secrets managers, vaults, certificate lifecycle technologies, or comparable credential‑management platforms.
• Strong knowledge of non‑human identity risk, least privilege, credential lifecycle, embedded‑secret risk, ownership, recertification, and compensating controls.
• Strong understanding of cloud IAM, DevOps, CI/CD, Kubernetes/container identities, APIs, and infrastructure‑as‑code patterns.
• Understanding of cloud and DevOps attack paths involving secrets, tokens, service principals, and workload identities.
• Scripting/API and automation capability.
• Ability to reconcile identity data across directories, cloud services, CMDB, secrets platforms, and applications.
• Ability to translate technical machine‑identity exposure into business and control risk.
• Strong cross‑functional collaboration with cloud, DevOps, application, infrastructure, and IAM teams.
• Systems thinking and ability to solve ownership/data‑quality problems at scale.
• Independent capability ownership.
• Clear standards and technical documentation.
• Pragmatic influence in engineering workflows.

Preferred Qualifications

• Cloud security/architecture certification in AWS, Azure, or GCP.
• Vendor certification for the organization's secrets‑management or vault platform.
• Kubernetes, DevOps, or infrastructure‑as‑code experience.
• CISSP, CISM, or comparable security credential.
• Experience designing machine‑identity governance at enterprise scale.

This position works hybrid out of the Chicago or Downers Grove Kemper office.

The range for this position is $79,500 to $132,900.

When determining candidate offers, we consider experience, skills, education, certifications, and geographic location among other factors.

This job is also eligible for our Kemper benefits package (Medical, Dental, Vision, PTO, 401k, etc.)

Sponsorship is not accepted for this role.

Kemper is proud to be an equal opportunity employer.

All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, disability status or any other status protected by the laws or regulations in the locations where we operate.

We are committed to supporting diversity and equality across our organization and we work diligently to maintain a workplace free from discrimination.

Kemper does not accept unsolicited resumes through or from search firms or staffing agencies.

All unsolicited resumes will be considered the property of Kemper and Kemper will not be obligated to pay a placement fee.

Kemper will never request personal information, such as your social security number or banking information, via text or email.

Additionally, Kemper does not use external messaging applications like WireApp or Skype to communicate with candidates. If you receive such a message, delete it.

#LI-JO1

Kemper at a Glance

The Kemper family of companies is one of the nation’s leading specialized insurers. With approximately $12 billion in assets, Kemper is improving the world of insurance by providing affordable and easy-to-use personalized solutions to individuals, families and businesses through its Kemper Auto and Kemper Life brands. Kemper serves over 4.6 million policies, is represented by approximately 24,200 agents and brokers, and has approximately 7,500 associates dedicated to meeting the ever‑changing needs of its customers.

Alliance United Insurance Company is not rated.

We value diversity and strive to be an employer of choice.

An Equal Opportunity Employer, M/F/D/V Eligible employees may enjoy benefits such as:

• Qualify for your choice of health and dental plans within your first month.
• Save for your future with robust 401(k) match, Health Spending Accounts and various retirement plans.
• Learn and Grow with our Tuition Assistance Program, paid certifications and continuing education programs.
• Contribute to your community through United Way and volunteer programs.
• Balance your life with generous paid time off and business casual dress.
• Get employee discounts for shopping, dining and travel through Kemper Perks.

Benefits eligibility may vary based on position classification, scheduled hours, work location, temporary or contingent status, independent contractor status, SkillBridge participation, and applicable plan terms.