Machine Identity Security Analyst

Relha LLC

Downers Grove (IL)

On-site

USD 80,000 - 133,000

Full time

8 days ago

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

Kemper is seeking an Identity Security & Non-Human Identity Analyst to work at our Illinois office. The analyst builds and operates security controls for non-human identities, including service accounts, workload identities, bots, service principals, secrets, keys, tokens, and certificates.

Role requires deep cloud/DevOps and identity lifecycle knowledge, hands-on secrets/credential engineering, automation, and risk-based governance.

Qualifications

5+ years IAM, cloud security, DevOps/DevSecOps, infrastructure security, or related experience.
Hands-on work with non-human identities, secrets, keys, certificates, or workload identity.
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Cloud Computing, or related discipline, or equivalent professional experience.
Experience with secrets managers, vaults, certificate lifecycle technologies, or comparable credential-management platforms.
Strong knowledge of non-human identity risk, least privilege, credential lifecycle, embedded-secret risk, ownership, recertification, and compensating controls.
Strong understanding of cloud IAM, DevOps, CI/CD, Kubernetes/container identities, APIs, and infrastructure-as-code patterns.
Understanding of cloud and DevOps attack paths involving secrets, tokens, service principals, and workload identities.
Scripting/API and automation capability.
Ability to reconcile identity data across directories, cloud services, CMDB, secrets platforms, and applications
Ability to translate technical machine-identity exposure into business and control risk.
Strong cross-functional collaboration with cloud, DevOps, application, infrastructure, and IAM teams.

Responsibilities

Discover and classify service accounts, application identities, bots, API keys, tokens, certificates, workload identities, and other machine identities.
Establish authoritative inventory, ownership, criticality, lifecycle status, and reconciliation across cloud, directories, CMDB, secrets platforms, and applications.
Engineer secure secrets, key, token, and certificate creation, storage, rotation, expiration, revocation, and monitoring processes.
Partner with cloud and DevOps teams on workload identity, managed identities, service principals, Kubernetes identities, CI/CD credentials, and infrastructure-as-code controls.
Identify stale, orphaned, embedded, overprivileged, or unmanaged credentials and drive risk-based remediation.
Implement least privilege, ownership certification, usage analytics, exception management, and governance for machine identities.
Build APIs, scripts, onboarding patterns, automated rotation, dashboards, and service metrics to scale the capability.