Data Protection & Identity Manager

Extreme Networks creates cloud-driven networking solutions that help organizations advance digital transformation. The Data Protection & Identity Manager will lead identity governance for human, service account, and AI agent identities, while owning the enterprise Data Loss Prevention program. The role develops security policies and controls, manages access and data protection processes, investigates incidents, and reports program effectiveness to senior leadership and regulatory stakeholders.

Responsibilities:

• Design, implement, and operate a unified Identity Governance & Administration (IGA) program covering human, service account, and AI agent identities — with particular focus on controlling the rapidly growing population of AI agent identities, creating the appropriate governance structure and guardrails based on best practice
• Establish lifecycle management processes for AI agent identities, including provisioning, entitlement review, and decommissioning, mitigating exposure to credential theft and malicious activity
• Define and enforce least privilege access models and zero-trust principles across all identity types
• Develop and maintain a real-time inventory of AI agent identities, their access scopes, and associated risk profiles
• Partner with AI platform and engineering teams to embed identity security controls into agent deployment pipelines
• Lead regular access certification and entitlement review cycles across the enterprise
• Integrate the process for human identity management with the AI agent identities to create a cohesive strategy
• Be a thought leader within Extreme on how the adoption of AI agents can be utilized to add value across the enterprise
• Own and mature the enterprise DLP strategy, policy framework, and toolset, ensuring coverage extends to AI-assisted and agent-driven data flows
• Drive full coverage of data tagging, classification, and sensitivity labelling across structured and unstructured data estates
• Define and enforce DLP policies for email, endpoint, cloud, and AI-assisted workflows
• Manage the DLP exception review process, ensuring risk-based approvals with appropriate audit trails
• Monitor DLP telemetry and investigate high-severity incidents in conjunction with the Security Operations Centre
• Report on DLP program effectiveness, policy coverage, and incident trends to senior leadership and relevant regulatory stakeholders

Requirements:

• Hands-on experience designing and operating identity governance programs, including non-human and service account identity management
• Demonstrated expertise in enterprise DLP tooling (e.g., Microsoft Purview, Symantec DLP, Zscaler) and policy development
• Experience with AI/ML platform security, including securing LLM-based agents, APIs, and automation pipelines, ad MCP environments
• Strong understanding of zero-trust architecture, least-privilege principles, and privileged access management (PAM)
• Familiarity with data classification frameworks and sensitivity labelling at enterprise scale
• Ability to lead cross-functional initiatives and influence stakeholders without direct authority
• Strong analytical and risk assessment skills; ability to translate technical risk into business impact
• Excellent written and verbal communication skills, including executive-level reporting
• Ability to manage multiple concurrent priorities and tasks in a fast-paced, high-growth environment
• Self-starter with a continuous improvement mindset and a drive to challenge existing processes
• 8+ years of experience in Information Security, with a minimum of 3 years in identity governance, IAM, or data protection roles
• Hands-on experience with Microsoft Entra ID (Azure AD), Okta, SailPoint, or equivalent IGA platforms
• Experience with SIEM, CASB, and endpoint DLP solutions in enterprise environments
• Bachelor's degree in Computer Science, Information Security, or a related field — or equivalent practical experience
• Monday–Friday, 40 hours per week
• On-call rotation required for high-severity DLP or identity incidents outside standard hours
• Experience securing environments with significant AI/ML or automation workloads is strongly preferred
• Relevant certifications preferred: CISSP, CISM, CCSP, Microsoft SC-300, or equivalent