Senior Cyber Security Engineer, IAM Cloud / AI Identity

Newell Brands is a leading consumer products company with a portfolio of iconic global brands. The Senior Cyber Security Engineer leads strategy, design, governance, and execution for non-human identities, including AI agents, MCP servers, service accounts, and workload identities across cloud and hybrid environments. The role establishes identity governance standards, drives cross-functional adoption, monitors risks, and mentors security engineers.

Responsibilities:

• Continuously discover and inventory AI agents, MCP servers and other non-human identities across cloud, SaaS and on-premises environments as they're provisioned, modified or retired
• Design and enforce governance controls - registration, ownership assignment, least-privilege scoping and credential lifecycle management for non-human identities
• Build and maintain automated detection for unmanaged or "shadow" AI agents and service identities, closing visibility gaps before risk increases
• Lead cross-functional alignment with platform, DevOps and AI/ML engineering teams to embed identity governance into agent and MCP server provisioning workflows, influencing teams outside the security organization to adopt consistent practices and standards
• Define and maintain policies for non-human identity authentication, authorization and session boundaries, aligned to Zero Trust principles
• Monitor for anomalous behavior, privilege drift and policy violations among AI agents and machine identities, and lead remediation
• Maintain an accurate, continuously updated risk register and ownership map for all identities in scope
• Evaluate emerging tools and standards for AI agent identity and MCP governance; lead adoption decisions, build the business case for investment, and drive implementation across impacted teams where adoption strengthens Newell's security posture
• Develop and present reporting and metrics on non-human identity coverage, risk and remediation to security leadership and cross-functional stakeholders; advise on program priorities and translate findings into actionable recommendations that influence department-level decisions
• Provide technical mentorship and guidance to junior and mid-level security engineers; may lead significant portions of complex cross-functional initiatives and serve as a subject matter authority for non-human identity across the security organization

Requirements:

• 5+ years of experience in identity and access management, cloud security or infrastructure security engineering
• Hands-on experience managing service accounts, workload identities or machine-to-machine authentication in a cloud environment (AWS, Azure or GCP)
• Deep knowledge in AI agent architectures and the Model Context Protocol (MCP), including how agents authenticate and interact with tools and data, with demonstrated ability to translate that knowledge into governance policy and engineering standards
• Experience with identity governance concepts - access certification, entitlement review, ownership assignment applied to non-human identities
• Knowledge and experience with modern authentication standards (OAuth 2.0, OIDC, SPIFFE/SPIRE, mTLS) as they apply to machine and workload identity, with experience applying these standards to define enterprise-level policies
• Strong scripting or automation skills (Python, PowerShell or Terraform) to build discovery and governance tooling at scale
• Ability to operate independently in ambiguity and define structure where none exists - this space is rapidly evolving, standards are still forming, and the role requires establishing program frameworks, influencing organizational direction and driving adoption across functions
• Experience with cloud security posture management (CSPM) or cloud infrastructure entitlement management (CIEM) tools
• Familiarity with secrets management platforms (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault)
• Exposure to AI/ML platform engineering or LLM application architecture
• Relevant certifications (AWS/Azure/GCP security specialty, CISSP, or equivalent)