Hello,
I have below exclusive position with one of our Client. Please review the requirement criteria below and revert to me with your updated resume so that we can move ahead for further steps.
Job Title: Agentic AI governance Specialist
Location: 100% Remote
Duration: 03+ Years Contract
Job Type: Long-Term Contract
Job Summary
Position Overview
This is an identity governance role, not an AI development role or a SOC analyst role. The person will design and run the full lifecycle for service accounts, API keys, OAuth apps, machine identities and AI agents: discovery, registration, ownership, policy, real-time monitoring, and decommissioning. The scale is hundreds of thousands of non-human identities. Astrix is the tool that the client has currently selected to do this. This work stream sits with 5 other work streams covering the client’s whole identity stack, so much of the work will be integration across products that are already there. ZScaler, SailPoint, Venice, Entra, CrowdStrike.
- Registry and ownership. Use Astrix and other discovery sources to build a central registry of NHIs and AI agents. Assign a named, accountable owner to each one, match owners to active people in SailPoint, and set up a process that fixes ownerless or orphaned identities.
- Full NHI lifecycle. Define how NHIs are requested, approved, provisioned, rotated, certified where it fits, and decommissioned, including service accounts in Active Directory, applications, SaaS and hyperscalers.
- Agentic AI governance. Register AI agents, including agents that create other agents, so each one traces back to a human owner. Define what each agent is allowed to do and set the rules for when a human must approve an action.
- Central policy and enforcement. Design policies that are managed centrally and enforced at the edge, moving beyond role-based and attribute-based models toward risk-based and intent-based access control for autonomous agents.
- Real-time monitoring and response (ITDR). Feed signals from CrowdStrike and Zscaler into policy and NHI tools so that an agent acting outside its policy is shut down or sent to its owner automatically, not just raised as an alert.
- Secrets and privileged access. Work with the PAM team on vaulting, rotation and removing hard-coded credentials, including from legacy and vendor-managed systems.
- Hybrid estate. Cover the whole environment, from hyperscalers and SaaS down to on-premises, older applications and mainframe.
- Compliance evidence. Produce audit-ready evidence of NHI and agent controls for gaming regulators, PCI and internal audit.
- Client leadership. Present to client security and IAM leaders, get changes made by application owners who don't report to you, and coordinate with the other workstreams.
Key Responsibilities
- Design the identity and security architecture for enterprise AI agents.
- Define authentication and authorization mechanisms for AI agents.
- Establish least-privilege access and permission scoping.
- Configure and implement security guardrails using Astrix Agent Control Plane.
- Establish logging, monitoring, and audit requirements for agent activities.
- Design Human-in-the-Loop (HITL) approval and intervention controls.
- Develop identity lifecycle and governance processes for AI agents.
- Identify and mitigate risks associated with autonomous and semi-autonomous AI agents.
- Work with IAM, cybersecurity, AI/ML, cloud, and application teams.
- Support enterprise adoption of secure and governed Agentic AI.
