Key Responsibilities
Conduct discovery and assessment of service accounts, managed identities, service principals, application identities, API credentials, certificates, and secrets.
Establish ownership, lifecycle management, governance, and certification processes for Non-Human Identities.
Identify orphaned identities, excessive privileges, credential risks, secret sprawl, and governance gaps.
Evaluate and recommend least-privilege access models, RBAC/ABAC controls, and privileged access governance practices.
Assess secrets management, certificate lifecycle management, and credential rotation processes.
Review cloud identity architectures and workload identity security across Azure, AWS, and Google Cloud Platform environments.
Support governance requirements for AI agents, machine identities, API security, and token-based access models.
Develop assessment findings, risk reports, remediation recommendations, and executive-level presentations.
Required Skills & Experience
8-15+ years of experience in Identity & Access Management (IAM).
Strong expertise in:
o Service Account & Machine Identity Governance
o Non-Human Identity (NHI) Security
o Privileged Access Management (PAM) & Secrets Management
o Cloud IAM & Identity Federation
Hands-on experience with (altleast 2 of the mentioned tools):
o PAM: CyberArk, HashiCorp Vault
o IGA: SailPoint, Saviynt, Microsoft Entra ID, Okta
Strong understanding of:
o Authentication, Authorization, RBAC/ABAC Models
o Azure, AWS, Google Cloud Platform, Kubernetes, and DevOps Ecosystems
Preferred experience in:
o Workload Identity Security
o API Security & Token Governance
o AI & Agentic Identity Security Models
o Healthcare/HIPAA-regulated environments
Desired Certifications: CISSP, Azure Security Engineer, CyberArk, SailPoint, Microsoft Identity & Access Administrator.
Never miss an opportunity! Create an alert based on the job you applied for.
