Senior Non-Human Identity & PAM Architect

Deloitte France; Detroit (MI); On-site; USD 105,000 - 208,000; Full time

Job summary

Deloitte is seeking a Non-Human Identity Senior Consultant to help secure machine identities across cloud and hybrid environments. You will assess, design, and implement controls for governance, secrets management, and privileged access, focusing on reducing identity risk and strengthening security across automation pipelines.

The role requires 4+ years in information security, experience with PAM or secrets management, and familiarity with platforms like CyberArk, HashiCorp Vault, or AWS

Qualifications

• Bachelor's degree in a related field is required.
• 4+ years in developing, implementing, or architecting information systems.
• 4+ years in Privileged Access Management or secrets management in cloud or hybrid environments.
• 4+ years with at least one enterprise PAM or secrets management platform.
• Experience across automation, provisioning, or credential governance in cloud/container contexts.
• Ability to travel 25-50% on average.
• Limited immigration sponsorship may be available.

Responsibilities

• Assess environments to identify Non-Human Identity risks and governance gaps.
• Design and deploy governance, privileged access, and secrets management across platforms.
• Implement credential vaulting, rotation, just-in-time access, and workload identity federation.
• Advise on architecture, runbooks, and implementation plans.
• Lead project workstreams and contribute to reusable assets and proposals.

Skills

Cybersecurity fundamentals

Privileged access management

Secrets management

Cloud security

Automation security

Education

Bachelor's degree

Tools

CyberArk

BeyondTrust

Delinea

HashiCorp Vault

AWS Secrets Manager

Azure Key Vault

Job description

Deloitte is seeking a Non-Human Identity Senior Consultant to help secure machine identities across cloud and hybrid environments. You will assess, design, and implement controls for governance, secrets management, and privileged access, focusing on reducing identity risk and strengthening security across automation pipelines.

The role requires 4+ years in information security, experience with PAM or secrets management, and familiarity with platforms like CyberArk, HashiCorp Vault, or AWS