Job Details:
Job Title: Agentic AI Identity Governance Specialist
Location: 100% Remote
Duration: 6+ Months Contract
Technology: Astrix, SailPoint, Entra ID, Zscaler, CrowdStrike, Venafi, PAM
Description:
This is an identity governance role, not an AI development role or a SOC analyst role. The person will design and run the full lifecycle for service accounts, API keys, OAuth apps, machine identities, and AI agents: discovery, registration, ownership, policy, real-time monitoring, and decommissioning. The scale is hundreds of thousands of non-human identities. Astrix is the tool that the client has currently selected to do this. This work stream sits with 5 other work streams covering the client’s whole identity stack, so much of the work will be integration across products that are already there. ZScaler, SailPoint, Venice, Entra, Crowdstrike.
Responsibilities:
- Registry and ownership. Use Astrix and other discovery sources to build a central registry of NHIs and AI agents. Assign a named, accountable owner to each one, match owners to active people in SailPoint, and set up a process that fixes ownerless or orphaned identities.
- Full NHI lifecycle. Define how NHIs are requested, approved, provisioned, rotated, certified where it fits, and decommissioned, including service accounts in Active Directory, applications, SaaS and hyperscale’s.
- Agentic AI governance. Register AI agents, including agents that create other agents, so each one traces back to a human owner. Define what each agent is allowed to do and set the rules for when a human must approve an action.
- Central policy and enforcement. Design policies that are managed centrally and enforced at the edge, moving beyond role-based and attribute-based models toward risk-based and intent-based access control for autonomous agents.
- Real-time monitoring and response (ITDR). Feed signals from CrowdStrike and Zscaler into policy and NHI tools so that an agent acting outside its policy is shut down or sent to its owner automatically, not just raised as an alert.
- Secrets and privileged access. Work with the PAM team on vaulting, rotation and removing hard-coded credentials, including from legacy and vendor-managed systems.
- Hybrid estate. Cover the whole environment, from hyperscale’s and SaaS down to on-premises, older applications and mainframe.
- Compliance evidence. Produce audit-ready evidence of NHI and agent controls for gaming regulators, PCI, and internal audit.
- Client leadership. Present to client security and IAM leaders, get changes made by application owners who don't report to you, and coordinate with the other workstreams.
