Agentic Identity & Access Management Architect

Our client, a leading Travel and Hospitality provider, is seeking a Agentic Identity & Access Management Architect to join their team.

Contract type and duration: 12 Month

Location:

USA

Work Model:
Remote

• Define target-state identity, authorization and governance architecture for AI applications, agents, tools, APIs, systems and users.
• Design reusable authorization patterns for user-to-agent, agent-to-tool, machine-to-machine and agent-to-agent interactions.
• Establish policies for least privilege, Zero Standing Privilege, separation of duties, context-aware access, runtime decisions and human approval.
• Define the full lifecycle for AI agents and non-human identities, including ownership, credentials, rotation, recertification, suspension, deprovisioning and evidence retention.
• Develop standards for OAuth 2.0, OIDC, token exchange, workload identity, delegated authorization, service accounts and short-lived credentials.
• Evaluate native and vendor capabilities and document tradeoffs, risks, integration impacts and recommendations.
• Create reference architectures, control requirements, design decisions, roadmaps and adoption guidance.
• Define logging and traceability that connect an agent action to its identity, owner, delegated user/system, authorization decision and affected resource.
• Partner across IAM, IGA, PAM, cloud security, application security, AI engineering, AI governance and enterprise architecture

• Deep enterprise IAM architecture and integration experience, including strong hands-on knowledge of PAM, directory services, workforce IAM and customer identity patterns
• Experience designing OAuth 2.0/OIDC and authorization flows for machine-to-machine, workload or agent-based interactions
• Practical knowledge of non-human identity and AI-agent lifecycle governance
• Strong understanding of least privilege, Zero Trust, Zero Standing Privilege, policy enforcement, runtime governance and auditability
• Cloud IAM experience across AWS and/or Azure/hybrid environments
• Experience with major IAM, IGA, PAM or secrets-management platforms such as SailPoint ISC, SailPoint Entro, Ping Identity, Cyber Ark, Entra , Hashi Corp Vault or AWS Secrets Manager
• Ability to produce reference architectures and translate complex IAM decisions for engineers, product teams and leadership
• Experience leading cross-functional stakeholders toward implementable solutions in a complex enterprise environment

• College degree in Technology, Information Security, Business, Finance, or equivalent professional experience
• Experience with SailPoint Identity Security Cloud and SailPoint Identity Now/Identity Governance solutions
• Knowledge of Cyber Ark privileged access management (PAM), secrets management, and Cyber Ark Identity capabilities
• Experience with the Ping Identity Platform, including authentication, federation, and identity access management solutions
• Familiarity with AWS IAM and cloud identity/security best practices within AWS environments
• Experience with Microsoft Entra  Microsoft Azure AI Foundry (formerly Azure AI Studio)
• Exposure to Crowd Strike capabilities related to endpoint, identity, and agent security monitoring
• Familiarity with the NIST AI Risk Management Framework (AI RMF) and OWASP guidance for LLM, generative AI, and autonomous-agent security
• Consulting experience and exposure to SAFe or other large-scale Agile delivery frameworks
• Experience supporting enterprise AI security, identity governance, or cloud security initiatives

• AI Security Threat Analysis
• Threat Detection Optimization
• Security Monitoring Excellence
• Adversarial Thinking Mindset
• Incident Response Readiness
• Identity & Access Security
• Cloud Security Expertise
• Security Architecture Insight