Senior IAM Systems Engineer – Global Security

Role Overview

• Lead integration of the enterprise AI / NHI identity solution with workloads and platforms across the organization, including AI platforms, cloud environments, container platforms, CI/CD pipelines, and application teams
• Partner with AI platform, cloud, DevOps, application, and security teams to deliver consistent AI identity controls across the estate
• Design and execute integration patterns for AI agents, services, and workloads to consume identity and secrets securely
• Build automation for AI / NHI onboarding, secret rotation, ephemeral credential issuance, and lifecycle management across enterprise systems
• Drive integration with broader IAM capabilities, including PAM, authorization, directory services, and IAM APIs
• Configure, test, and operationalize AI identity deployments across cloud, on-prem, and hybrid environments
• Establish observability, alerting, and operational practices for AI identity integrations across systems
• Work with Architecture, Security, Risk, and Audit to ensure integrations meet regulatory and internal control requirements
• Provide deep technical input into rollout planning, change management, and consumer experience design
• Support production operations, incident response, and root cause analysis for AI identity integrations
• Document integration patterns, runbooks, and standards for use by partner teams across the enterprise
• Build operational automation for the AI identity solution patching, certificate rotation, configuration drift detection, and routine support operations
• Integrate with CI/CD pipelines and infrastructure platforms as needed

Requirements

• 7+ years in identity, security, platform, or DevOps integration engineering, with significant experience in Identity and Access Management
• Strong hands-on experience integrating identity and secret solutions with enterprise workloads and platforms
• Strong understanding of non-human identity concepts: service accounts, workload identity, ephemeral credentials, secret rotation, attestation
• Hands-on experience with Kubernetes workload identity and cloud-native identity patterns (AWS IAM Roles for Service Accounts, Azure Managed Identities, GCP Workload Identity)
• Strong automation and scripting skills (Python, Go, PowerShell, or equivalent), with proficiency in Infrastructure-as-Code (Terraform), CI/CD, and GitOps
• Strong understanding of authentication and authorization standards: OAuth 2.0, OIDC, mTLS, JWT
• Working knowledge of the banking/financial services regulatory landscape (FRB, Part 30, OSFI) and how it shapes machine identity and secrets controls
• Excellent collaboration and communication skills, with a track record of driving cross-team integration initiatives in matrixed environments

Tech Stack

• AWS
• Azure
• Cloud
• Google Cloud Platform
• Kubernetes
• Python
• Terraform
• Go

Benefits

• A comprehensive Total Rewards Program including bonuses and flexible benefits
• Competitive compensation
• Commissions and stock where applicable
• Leaders who support your development through coaching and managing opportunities
• Opportunities to do challenging work and take on progressively greater accountabilities