Digital Identity Non-Human Identity, Machine Identity & Agentic Identity Associate Director
$155,000–$264,000 year
On-siteChicago, Illinois, United States or Miami, Florida, United States
Chicago, Illinois, United States or Miami, Florida, United StatesOn-siteFull Time$155,000–$264,000 yearSenior LevelLarge
Full TimeSenior LevelLarge
Job Summary
Lead client engagements spanning strategy, assessments, architecture design, implementation oversight, operating model design, governance, and roadmap development for securing non-human, machine, and agentic identities. Partner with CISOs and enterprise architects to advise on emerging risks, devise solutions using analytics and automation, and expand market presence with Fortune 500 organizations. Mentor consulting teams while driving business development, proposal development, and thought leadership initiatives across cybersecurity and AI security domains.
Required Qualifications
- Bachelor's degree in a relevant discipline (e.g., Information Systems, Computer Science, Engineering, Cybersecurity)
- 9+ years working in IAM, PAM, cybersecurity consulting, cloud security, or related fields
- Experience delivering strategic IAM, PAM, NHI, or Machine Identity advisory services, including assessments, maturity evaluations, strategy development, and roadmap creation
- Experience designing enterprise operating models and governance frameworks for identity programs
- Ability to communicate technical and business risks to executive stakeholders and boards
- Experience developing identity security standards, policies, and control frameworks
- Hands-on experience securing and governing non-human identities including service accounts, application accounts, service principals, API keys, workload identities, container identities, automation accounts, bot identities, and AI-powered agents
- Experience addressing credential sprawl, secrets management, token lifecycle management, certificate lifecycle management, privileged service account governance, identity ownership and accountability, least privilege implementation, and identity discovery and inventory
- Experience designing lifecycle processes for creation, ownership, approval, monitoring, certification, review, and retirement of machine identities
- Hands-on experience in architecting and implementing NHI/Secrets management solutions aligning with leading NHI frameworks such as OWASP
- Architect-level understanding of IAM capabilities including IGA, PAM, Access Management, authentication and authorization, and Identity Threat Detection & Response (ITDR)
- Experience designing secure identity architectures leveraging OAuth, OpenID Connect, SAML, SCIM, JWTs, service-to-service authentication, and federated workload identity
- Experience designing or evaluating secrets management solutions, certificate lifecycle management solutions, key management architectures, cloud-native identity platforms, API authorization patterns, and Zero Trust architectures
- Experience with one or more of the following: Microsoft Entra ID, Azure Managed Identities, AWS IAM, Google Cloud IAM, Kubernetes, container platforms, CI/CD platforms, Infrastructure-as-Code environments, and cloud-native workload identity solutions
- Experience building or leading a Machine Identity or Non-Human Identity program
- Experience with service account governance initiatives
- Experience with certificate lifecycle management programs
- Experience implementing workload identity federation
- Experience securing AI-enabled applications or autonomous systems
- Existing relationships with IAM, PAM, Cloud Security, DevOps, or AI Security leaders
Desired Qualifications
- Experience within a consulting firm, systems integrator, software vendor, or large enterprise identity program
- Professional certifications, including CISSP, CCSP, Microsoft security certifications, CyberArk certifications, SailPoint certifications, Saviynt certifications, AWS certifications, and vendor-specific IAM or PAM credentials
- Experience developing NHI security offerings, thought leadership, or market strategies
- Experience with CyberArk (Conjur), SailPoint, Saviynt, Veza, Delinea, Okta, Ping Identity, Microsoft Entra, Venafi, HashiCorp Vault, AWS IAM, Kubernetes, BeyondTrust, Akeyless, Oasis Security, Token, Clutch, and other NHI, PAM, and Identity Security platforms
- Experience with Agentic Identity
- Experience with delegated authorization models
- Experience with human accountability models for non-human actors
- Experience with secure access patterns for AI systems
- Experience with governance and lifecycle management of AI agents and autonomous workloads
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.