IAM Engineer – AI Security & Infrastructure (Senior)

About

Our client is seeking a Senior IAM Engineer to lead the design and implementation of security solutions for AI/ML and Generative AI platforms. This role will bridge AI innovation with enterprise IAM frameworks, focusing on securing non-human identities, AI pipelines, and multi-cloud environments.

Key Responsibilities

• Design and implement IAM solutions for AI platforms, including non-human identities and cross-cloud access
• Conduct threat modeling and support mitigation strategies for AI/ML risks (e.g., prompt injection, adversarial attacks)
• Lead PoCs for emerging AI security technologies and protocols (e.g., MCP, A2A)
• Secure APIs, authentication flows (OAuth2/OIDC), and AI service consumption
• Design and implement secrets management solutions (e.g., Azure Key Vault, GCP Secret Manager)
• Establish cloud security baselines, network segmentation, and IAM guardrails across Azure, GCP, and on-prem
• Collaborate with cross-functional teams to translate PoCs into production-ready solutions and IaC controls
• Support AI Red Team initiatives and infrastructure security testing

Must-Have Qualifications

• Strong experience in IAM design and implementation, including non-human/workload identities
• Hands-on experience with cloud platforms (Azure, GCP) and multi-cloud security
• Expertise in KMS and cryptography (key lifecycle, encryption patterns, BYOK/CMEK)
• Experience with API security and authentication protocols (OAuth2, OIDC)
• Strong Python or scripting experience for automation
• Experience with Terraform and policy-as-code frameworks (OPA, Sentinel, Azure Policy)
• Solid understanding of AI/ML security risks and mitigation frameworks (e.g., OWASP LLM Top 10, MITRE ATLAS)

Nice-to-Have

• Experience with workload identity federation and token exchange (STS)
• Exposure to AI/ML pipelines and platforms (Databricks, Vertex AI)
• Experience with event-driven architectures (Pub/Sub, Event Grid)
• Familiarity with low-code tools (ADF, Logic Apps, Power Automate)
• Experience supporting AI security reviews or red team initiatives

Additional Information

• MUST BE ON W2 - Third Party Recruitment/ Sub Vending not permitted