Lead AI Identity Security Engineer

Mastercard; Helena (MT); On-site; USD 140,000 - 210,000; Full time

Job summary

Mastercard seeks a Lead AI Security Engineer focusing on AI identities to secure AI systems’ non‑human identities, models, agents, and pipelines. You will implement lifecycle controls, access enforcement, and continuous monitoring to minimize risk across development, testing, and production environments.

Responsibilities include policy enforcement, threat modeling, and governance aligned with NIST/ISO, plus collaboration with IAM teams to mature security controls.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, Engineering, or a related field.
• Strong experience in identity and access management, security engineering, or security operations, with exposure to AI or highly automated systems.
• Expertise in Least Agency frameworks, Zero Trust Architecture, Delegated Authority Management, Cryptographic Identities, and Short Lived Credentialing.
• Practical experience securing non‑human identities, service accounts, APIs, or machine‑to‑machine access.
• Understanding of AI/ML architectures and how identities are used across data pipelines, model execution, and agent‑based systems.
• Proven ability to design, assess, and operationalize identity controls at scale.
• Strong analytical and communication skills, with the ability to translate identity risk into actionable security outcomes.
• Relevant certifications such as CISSP, GIAC, CIAM/IAM‑related certifications, or cloud security certifications are desirable.

Responsibilities

• AI Identity Discovery & Inventory: design and operate mechanisms to discover and inventory AI identities (models, agents, autonomous workflows).
• AI Identity Lifecycle Management: define and implement lifecycle controls for AI identities with provenance and ownership.
• Access Control & Policy Enforcement: enforce least-privilege access for AI identities with RBAC/ABAC and context-aware access.
• Monitoring, Detection & Risk Assessment: monitor AI identity activity and assess risks using telemetry from identity platforms.
• AI Security Assessments & Control Validation: conduct architecture reviews, threat modeling, and control testing.
• Governance, Standards & Compliance: align with NIST/ISO and regulatory expectations; provide evidence for audits.
• Documentation, Reporting & Metrics: develop SOPs and reports on AI identity posture and KPIs.
• Advisory, Training & Enablement: educate teams on AI identity risks and best practices.
• Research, Experimentation & Continuous Improvement: stay current and run POCs for new tools.

Skills

Identity & access management

Security engineering

Zero Trust Architecture

Least Agency frameworks

Cryptographic Identities

Machine-to-machine security

AI/ML identity concepts

Analytical communication

Education

Bachelor’s or Master’s degree in CS/InfoSec/Engineering

Job description

Mastercard seeks a Lead AI Security Engineer focusing on AI identities to secure AI systems’ non‑human identities, models, agents, and pipelines. You will implement lifecycle controls, access enforcement, and continuous monitoring to minimize risk across development, testing, and production environments.

Responsibilities include policy enforcement, threat modeling, and governance aligned with NIST/ISO, plus collaboration with IAM teams to mature security controls.