Senior IAM Security Architect for AI & Cloud Identity

PepsiCo Deutschland GmbH; Plano (TX); On-site; USD 124,000 - 207,000; Full time

Benefits offered by this job

Annual bonus 15%

Paid time off

Benefits package

Job summary

PepsiCo Deutschland GmbH seeks an IAM Principal Cybersecurity Architect to lead strategy, design, and governance of IAM services including AI, LLMs, and autonomous AI agents. This senior role sets enterprise AI identity standards, secures AI platforms, and enables safe Agentic AI adoption across the organization.

You will partner with AI Engineering, Cloud, Enterprise Architecture, and Security teams to design scalable, secure AI solutions and govern non-human identities with Zero Trust

Qualifications

• Bachelor’s degree in computer science, cybersecurity, information technology, or a related field.
• 15+ years of experience in Cybersecurity with significant IAM expertise.
• 7+ years in a Principal, Lead, or Senior Architecture role supporting enterprise or cloud-native environments.
• Expert knowledge of IAM technologies including AWS IAM, AWS Identity Center, Entra ID, OAuth 2.0, OIDC, SAML, and Zero Trust Architecture.
• Experience securing AI platforms, LLMs, Agentic AI applications, or autonomous AI agents.
• Strong understanding of cloud security, workload identities, and non-human identity management.
• Excellent communication and stakeholder management skills.

Responsibilities

• Lead solution architecture across IAM services for cross functional programs.
• Lead modernization of IAM capabilities supporting AI and cloud-native applications.
• Design secure identity architectures leveraging AWS IAM, AWS Identity Center, Microsoft Entra ID, and cloud-native identity services.
• Integrate AI platforms with enterprise IAM, Identity Governance (IGA), and Privileged Access Management (PAM) solutions.
• Define the enterprise architecture and security strategy for AI systems, LLMs, and Agentic AI platforms.
• Develop architecture standards, reference designs, and best practices for securing AI workloads.
• Partner with AI Engineering and platform teams to embed security-by-design into AI solutions.
• Drive adoption of Zero Trust principles across AI and cloud environments.
• Design and govern the complete identity lifecycle for AI agents, including onboarding, authentication, authorization, certification, monitoring, and decommissioning.
• Establish governance standards for AI identities, non-human identities, and machine identities.
• Implement least privilege, Just-in-Time, and Just-Enough-Access models for AI workloads.
• Ensure AI systems meet enterprise security, compliance, privacy, and regulatory requirements.
• Serve as the technical authority for AI identity security across the enterprise.
• Partner with Cybersecurity, Enterprise Architecture, AI Engineering, Cloud, GRC, Privacy, and business teams to deliver secure AI capabilities.
• Mentor architects and engineers on AI security, IAM, and cloud identity best practices.
• Communicate architecture decisions and security risks effectively to executive leadership and technical stakeholders.

Skills

IAM expertise

Cloud security

Secure AI platforms

Zero Trust

Leadership

Education

Bachelor’s degree in CS/Cybersecurity/IT

Tools

AWS IAM

AWS Identity Center

Microsoft Entra ID

OAuth 2.0

OIDC

SAML

Zero Trust Architecture

Saviynt

SailPoint

AWS Bedrock

Amazon AgentCore

Azure AI

Job description

PepsiCo Deutschland GmbH seeks an IAM Principal Cybersecurity Architect to lead strategy, design, and governance of IAM services including AI, LLMs, and autonomous AI agents. This senior role sets enterprise AI identity standards, secures AI platforms, and enables safe Agentic AI adoption across the organization.

You will partner with AI Engineering, Cloud, Enterprise Architecture, and Security teams to design scalable, secure AI solutions and govern non-human identities with Zero Trust