Senior AI Identity Platform Engineer

LTS; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

LTS is seeking a Senior AI Identity Platform Engineer in the United States (Remote) to design and implement identity foundations for autonomous AI agents, enterprise services, and users. You will define provisioning, credentials, and access controls, building scalable identity capabilities across a secure AI platform.

You will integrate with enterprise IAM (Entra ID, Okta, AD), apply Zero Trust, and design modern auth frameworks for AI systems, APIs, and cloud environments, enabling safe

Qualifications

• Bachelor’s degree or equivalent professional experience in a technical discipline.
• 7+ years of software/platform/identity engineering or cloud security experience.
• Experience designing authentication and authorization architectures for enterprise apps.
• Knowledge of OAuth 2.0, OpenID Connect, JWT, SAML, PKI, and modern identity protocols.
• Experience integrating enterprise identity providers (e.g., Entra ID, Okta, AD) and federation.
• Experience building secure REST APIs, microservices, and distributed systems.
• Knowledge of Zero Trust, RBAC/ABAC, delegated authorization, and identity federation.
• Cloud platform experience (Azure, AWS, GCP).
• Strong programming skills in Python and experience with Go/Java/TypeScript.

Responsibilities

• Design identity services supporting autonomous and multi-agent AI systems.
• Establish secure identities for AI agents, enterprise services, users, and external integrations.
• Define identity lifecycles including provisioning, credential management, rotation, and decommissioning.
• Build reusable, scalable identity capabilities across the AI platform.
• Design and implement modern authentication/authorization frameworks for AI agents and platform services.
• Implement OAuth 2.0, OIDC, JWT, service principals, mTLS, and delegated authorization models.
• Apply least-privilege and Zero Trust throughout AI workflows.
• Build fine-grained authorization models for access to data, APIs, tools, and services.
• Integrate AI platforms with enterprise identity providers and enable secure federation.
• Collaborate with security teams to align AI identity with organizational standards.
• Design secure agent frameworks for accessing enterprise APIs, databases, and tools.
• Develop identity services, SDKs, APIs, and libraries; automate provisioning and policy enforcement.
• Partner with platform engineers to embed identity services into architecture.

Skills

Python

Go

Java

TypeScript

Education

Bachelor's degree in Computer Science or related field

Tools

Microsoft Entra ID

Okta

Active Directory

Azure

AWS

Job description

Location: United States - Remote
Clearance: Ability to obtain and maintain a Public Trust

LTS is seeking a Senior AI Identity Platform Engineer to design and build the identity foundation that enables AI agents, enterprise applications, cloud services, and users to interact securely and intelligently. You'll establish authentication, authorization, credential management, and identity services that allow autonomous AI systems to operate safely across enterprise environments.

The Agentic AI platform is designed to help engineers understand, analyze, and modernize one of the most consequential legacy software systems still operating today.

Our platform enables engineers to ask questions in plain English and receive explainable, verifiable answers traced directly back to decades of production source code. Rather than replacing engineers, we're building AI that accelerates engineering through transparency, traceability, and intelligent reasoning.

We're building an AI-native engineering platform supporting the modernization of mission-critical healthcare systems serving millions of Veterans nationwide.

The platform is designed for deployment across federal enterprise environments and is being engineered to align with FedRAMP security controls, Zero Trust principles, and federal compliance requirements.

The product has executive sponsorship, committed users, and a customer investing in long-term modernization. Our engineering team is intentionally small, giving every engineer meaningful ownership and direct influence over product direction.

We don't simply build AI-powered software, we build software with AI. This is not another chatbot.

Using LLMs, AI agents, secure identity architectures, and AI-assisted development is simply how we engineer.

What You’ll Do:

Design AI Identity Architecture

• Design identity services supporting autonomous and multi-agent AI systems.
• Establish secure identities for AI agents, enterprise services, users, and external integrations.
• Define identity lifecycles for AI agents, including provisioning, credential management, rotation, and decommissioning.
• Build reusable identity capabilities that scale across the AI platform.
• Design and implement modern authentication and authorization frameworks for AI agents and platform services.
• Implement OAuth 2.0, OpenID Connect (OIDC), JWT, service principals, mutual TLS (mTLS), and delegated authorization models.
• Apply least-privilege and Zero Trust principles throughout AI workflows.
• Build fine-grained authorization models controlling AI access to enterprise data, APIs, tools, and services.

Enterprise Identity Integration

• Integrate AI platforms with enterprise identity providers such as Microsoft Entra ID, Okta, Active Directory, and other IAM solutions.
• Enable secure identity federation across cloud and on-premises environments.
• Collaborate with enterprise security teams to align AI identity with organizational security standards.

Secure Agent & Tool Access

• Design secure frameworks governing how AI agents discover, authenticate to, and invoke enterprise APIs, databases, and external tools.
• Build authorization models controlling agent capabilities and delegated permissions.
• Protect sensitive enterprise resources through policy-driven access controls.
• Implement secure credential handling and secrets management across AI workflows.
• Develop reusable identity services, SDKs, APIs, and libraries supporting secure AI application development.
• Automate identity provisioning, credential lifecycle management, and authorization policies.
• Improve developer productivity through standardized identity services and secure engineering patterns.
• Partner with platform engineers to integrate identity services into the AI platform architecture.

Governance & Auditability

• Ensure every AI action is authenticated, authorized, attributable, and auditable.
• Implement identity-aware logging, traceability, and policy enforcement.
• Support compliance and governance requirements for highly regulated environments.
• Partner closely with AI Security Engineers to establish secure-by-design AI development practices.

What We’re Looking For:

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Information Systems, or a related technical discipline (or equivalent professional experience).
• 7+ years of software engineering, platform engineering, identity engineering, or cloud security experience.
• Experience designing authentication and authorization architectures for enterprise applications.
• Strong knowledge of OAuth 2.0, OpenID Connect (OIDC), JWT, SAML, PKI, and modern identity protocols.
• Experience integrating enterprise identity providers such as Microsoft Entra ID, Okta, Active Directory, or similar IAM platforms.
• Experience building secure REST APIs, microservices, and distributed systems.
• Knowledge of Zero Trust Architecture, RBAC, ABAC, delegated authorization, and identity federation.
• Experience with cloud platforms (Azure, AWS, or Google Cloud).
• Strong programming skills in Python plus experience with Go, Java, or TypeScript.
• Excellent communication, analytical, and problem-solving skills.
• Experience designing secure systems that enable innovation rather than restrict it.
• Expertise in identity and access management.
• Hands‑on experience with cloud-native architecture and modern authentication frameworks.
• Strong ability to stay current with emerging AI technologies and evolving identity standards.
• Ability to collaborate effectively across software engineering, security, and AI disciplines.
• Willing and able to take ownership of difficult technical challenges and build elegant, innovative solutions.

Nice to Have:

• Experience developing AI platforms, Agentic AI systems, or Large Language Model (LLM) applications.
• Experience securing Retrieval-Augmented Generation (RAG) systems and AI tool integrations.
• Familiarity with Model Context Protocol (MCP) and secure AI tool invocation.
• Experience with HashiCorp Vault, Azure Key Vault, AWS Secrets Manager, or similar secrets management platforms.
• Experience implementing identity services in Kubernetes and cloud-native environments.
• Experience with AI governance, Responsible AI, or AI platform security.
• Familiarity with LangGraph, LangChain, CrewAI, Semantic Kernel, AutoGen, or similar AI orchestration frameworks.
• Experience supporting Federal Government or healthcare environments.
• Identity or cloud certifications such as Microsoft Identity and Access Administrator, CISSP, Security+, CCSP, or cloud security certifications are a plus.

What’s In It for You?

• The Opportunity to support high-visibility federal missions
• A culture that values innovation, growth, and collaboration
• Access to cutting-edge tools and technologies
• Comprehensive benefits for you and your family
• A career path that rewards ambition and performance

If you’re ready to push boundaries, sharpen your skills, and join a team that is passionate about building what’s next, we’d love to meet you. Apply today and let’s build a future together!

LTS shares salary ranges to promote transparency. Compensation ranges are provided for informational purposes, and final compensation may vary based on experience, skills, location, and role requirements.

LTSis committed to offering eligible employees comprehensive benefits that will provide them with options intended to meet their needs and the needs of their family.

U.S. Standard Demographic Questions

We invite applicants to share their demographic background. If you choose to complete this survey, your responses may be used to identify areas of improvement in our hiring process.

How would you describe your gender identity? Select...

How would you describe your racial/ethnic background? Select...

How would you describe your sexual orientation? Select...

Do you identify as transgender? Select...

Do you have a disability or chronic condition (physical, visual, auditory, cognitive, mental, emotional, or other) that substantially limits one or more of your major life activities, including mobility, communication (seeing, hearing, speaking), and learning? Select...

Are you a veteran or active member of the United States Armed Forces? Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in LTS’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305

Page 1 of 1

OMB Control Number 1250-0005

Expires 04/30/2026

Voluntary Self-Identification of Disability

Form CC-305 Page 1 of 1 OMB Control Number 1250-0005 Expires 04/30/2026
Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp .

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

• Alcohol or other substance use disorder (not currently using drugs illegally)
• Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
• Blind or low vision
• Cancer (past or present)
• Cardiovascular or heart disease
• Celiac disease
• Cerebral palsy
• Deaf or serious difficulty hearing
• Diabetes
• Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
• Epilepsy or other seizure disorder
• Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
• Intellectual or developmental disability
• Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
• Missing limbs or partially missing limbs
• Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
• Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
• Neurodivergence, for example, attention‑deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
• Partial or complete paralysis (any cause)
• Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
• Short stature (dwarfism)
• Traumatic brain injury

Disability Status Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.