Non-Human Identity and Cloud IAM – Platform Lead

Allergan; North Chicago (IL); On-site; USD 120,000 - 160,000; Full time

Job summary

AbbVie is seeking a Non-Human Identity and Cloud IAM – Platform Lead in North Chicago, Illinois. This role involves defining strategies for managing non-human identities, including AI agents, ensuring security and compliance across cloud environments. Candidates must have substantial experience in identity management and cloud IAM frameworks. The position offers a chance to lead complex cross-functional programs and drive innovation in identity governance, aligning with AbbVie’s commitment to integrity and technological advancement.

Qualifications

• 8 years of experience or 3 years with a PhD, related to identity management.
• Hands-on experience with cloud IAM frameworks in large enterprises.
• Demonstrated success in managing NHI programs and machine identities.

Responsibilities

• Define the Non-Human Identity strategy across various environments.
• Build and maintain a centralized NHI registry for machine identities.
• Establish governance for AI agents ensuring security monitoring.

Skills

Non-human identity management

Cloud IAM

Machine identity governance

Communication skills

Secrets management

Cross-functional program management

Education

Bachelor’s degree or equivalent experience (PhD)

Tools

AWS IAM

Azure Entra ID

GCP IAM

HashiCorp Vault

Python

Terraform

Job description

Job Description

This position is part of AbbVie's Information Security & Risk Management (ISRM) team within Business Technology Solutions. The Identity & Access Management (IAM) team is responsible for the development, implementation, and oversight of AbbVie's IAM strategy, ensuring secure, efficient, and compliant access to systems and data. The NHI and Cloud IAM function addresses machine identities, which now outnumber humans, and the rapid expansion of AI agents. This role is the IAM authoritative voice on how these platforms must integrate with identity governance, and it is accountable for ensuring no non-human identity operates outside AbbVie's visibility or control.

In the role of Non-Human Identity and Cloud IAM – Platform Lead, you will tackle one of the most complex and rapidly evolving challenges in enterprise security: establishing a unified strategy for non-human identities, AI agent governance, and cloud IAM – bridging today’s fragmented landscape into a coherent, observable, and future‑ready program.

Responsibilities

• Define and drive the enterprise Non‑Human Identity (NHI) strategy, rationalizing overlapping efforts and establishing a centralized governance program covering all machine identities across on‑premises, cloud, and agentic environments.
• Build and maintain a comprehensive NHI registry encompassing service accounts, APIs, bots, application identities, robotic process automation, and AI agents – ensuring every non‑human identity is discovered, inventoried, classified, and governed within IAM systems.
• Own AbbVie's identity governance posture for AI agents, ensuring those platforms integrate with IAM and that each AI agent is inventoried, mapped to its owning identity, governed, and visible for security monitoring.
• Proactively discover new AI agents and agentic workloads as they are introduced, partnering with platform and business teams to onboard them into the NHI governance framework and drive remediations where gaps exist.
• Serve as the IAM point of accountability for all agent‑related identity questions: defining standards for authentication, credentials, credential protection, and activity observability.
• Establish centralized NHI observability by integrating IAM platforms with AWS, Azure, GCP, and agentic platforms – so IAM maintains a living view of all non‑human identities.
• Design and implement modern NHI credential security controls, including just‑in‑time (JIT) access, dynamic secrets, short‑lived certificates, automated credential rotation, and runtime authentication.
• Assess the current tooling landscape for NHI and cloud IAM, determine platform extensions or new capabilities, and build a phased modernization roadmap.
• Own and evolve the Cloud IAM and IGA strategy, closing the integration gap between cloud‑native identity platforms (AWS IAM, Azure Entra ID, GCP IAM) and AbbVie's central IAM/IGA tools.
• Design cloud identity governance frameworks, including role‑based access models, entitlement management, access certifications, and least‑privilege enforcement across cloud environments.
• Drive cross‑functional alignment across IAM, AI Platform, Cloud, Security Architecture, Compliance, Audit, and business teams, translating requirements into executable roadmap priorities and holding partners accountable for IAM integration commitments.
• Establish KPIs and maturity metrics for the NHI and Cloud IAM program, providing executive‑level visibility into inventory completeness, risk posture, program progress, and gaps.
• Ensure compliance with regulatory requirements (SOX, GDPR, PCI‑DSS) for machine identities and cloud access controls, responding to and remediating audit findings.
• Manage budget, resources, and vendor relationships for all NHI and Cloud IAM technologies and solutions.
• Lead and mentor a team of technical specialists, cultivating proactive governance, automation, and continuous improvement.

Qualifications

• Bachelor’s degree with 8 years of experience, or 7 years of relevant experience, or PhD with 3 years of experience.
• Hands‑on experience with non‑human identity management, cloud IAM, or machine identity governance in large enterprise environments.
• Demonstrated experience establishing or maturing NHI programs—including service accounts, API credentials, application identities, and automated/agentic workloads.
• Strong hands‑on expertise with cloud IAM frameworks: AWS IAM, Azure Entra ID, and/or GCP IAM, including integration with central IGA platforms.
• Experience designing and implementing cloud IGA processes: entitlement management, access certifications, role‑based access models, and least‑privilege enforcement in cloud environments.
• Proven experience with secrets management platforms and modern credential security patterns (JIT access, short‑lived certificates, dynamic secrets, automated rotation).
• Architecture‑level understanding of identity federation, service‑to‑service authentication, and cloud‑native identity patterns (OAuth, OIDC, SAML, workload identity).
• Strong track record of driving complex, cross‑functional programs in matrixed organizations – influencing and holding accountable non‑direct‑report teams.
• Proactive identification of governance gaps and partner remediation with scalable, automated processes.
• Excellent communication and executive presentation skills, translating deeply technical concepts for non‑technical stakeholders.

Beneficial

• Familiarity with AI agent platforms and their identity/credential patterns (e.g., Microsoft Copilot ecosystem, AWS Bedrock).
• Experience building NHI discovery and inventory capabilities, including integration with non‑identity‑governance platforms.
• Familiarity with containerization and Kubernetes service account management.
• Hands‑on experience with IGA platforms and their cloud connectors (Saviynt, SailPoint).
• Scripting and automation experience (PowerShell, Python, Terraform).
• Knowledge of certificate management, PKI infrastructure, and API security platforms.
• Understanding of CIS, NIST, and other cloud security compliance frameworks.
• Industry certifications such as CISSP, CCSP, AWS/Azure/GCP security certificates.
• Experience in the pharmaceutical or life sciences industry.

Tools and Skills You Will Use in This Role

• Cloud IAM platforms: AWS IAM, Azure Entra ID, GCP IAM – and their integration with enterprise IGA.
• Secrets management platforms: HashiCorp Vault, AWS Secrets Manager, Azure Key Vault.
• IGA platforms with cloud connectors: Saviynt, SailPoint.
• NHI discovery, inventory, and governance tooling.
• Just‑in‑time access, dynamic secrets, and runtime authentication frameworks.
• Integration APIs and connectors for agentic platforms (Microsoft Copilot, AWS Bedrock).
• Service‑to‑service authentication protocols: OAuth, OIDC, SAML, workload identity federation.
• Containerization and Kubernetes service account management.
• CI/CD pipeline integrations for identity and secrets (Jenkins, GitHub Actions, Azure DevOps, Terraform).
• Scripting and automation: PowerShell, Python, Infrastructure as Code.
• Certificate management and PKI.
• Audit and compliance reporting for cloud and NHI controls.
• Strong architectural thinking, cross‑functional influence, and executive communication skills.

Additional Information

AbbVie is an equal‑opportunity employer and is committed to operating with integrity, driving innovation, and serving our community. Equal Opportunity Employer / Veterans / Disabled. US & Puerto Rico applicants may seek reasonable accommodation. For more information, visit the AbbVie equal‑employment‑opportunity page.