AVP, IAM AI Architect Cyber Security

Build a career that matches all your initiative with an impressive dose of innovation. From cutting-edge resources and a collaborative environment to the freedom to make an impact and more, you’ll find the ingredients you need at LPL Financial to shape your success while helping clients pursue their financial goals.

We are seeking an experienced Identity and Access Management (IAM) Architect with a strong AI and agent-integration focus to lead the design, proof-of-concept (POC), and hands‑on implementation of identity patterns for AI workloads, conversational agents, and AI platform integrations across the enterprise. The ideal candidate combines deep IAM architecture expertise with practical engineering skills—building POCs, configuring OAuth/OIDC flows, and partnering directly with AI engineering teams to secure agent runtimes, tool access, and human-in-the-loop experiences.

This role owns IAM architecture for AI use cases, including delegated and service-to-service access, API gateway/BFF token flows, scoped credentials, and governance alignment. You will design and validate OAuth/OIDC patterns (Auth Code + PKCE, OBO, token exchange, client credentials) across identity providers (Ping One AIC, Entra ), gateways, and agent platforms. The AI IAM Architect partners across AI/platform engineering, IAM, security, and enterprise architecture to define reusable, secure, and production‑ready identity standards for agents.

• Discover AI/agent identity requirements across users, services, runtimes, tools, and APIs.
• Assess existing SSO, MFA, federation, and API authorization models; identify gaps in delegation, token lifecycle, scopes, secrets, and auditability.
• Design enterprise IAM patterns (user context propagation, delegation chains, BFF sessions, least‑privilege access) and OAuth/OIDC client models.
• Define standards for securing agent tools, data access, and cross‑domain integrations; align to zero trust and regulatory controls.
• Produce architecture artifacts (CAD/HLD/PSS) and reference implementations.
• Lead and build IAM POCs (end‑to‑end flows, token exchange, gateway enforcement, delegated agent access).
• Configure/test identity flows; troubleshoot tokens, scopes, and integrations.
• Implement or guide IAM integrations across gateways, BFFs, agent orchestration, and observability.
• Evaluate and implement scalable Non‑Human Identity (NHI) and secrets management solutions for agents and autonomous workloads, including credential issuance, rotation, and revocation.
• Design and implement agent identity at the gateway, including token validation, scope enforcement, and policy‑driven access control.
• Automate agent onboarding workflows, including identity registration, entitlement assignment, and integration with IAM/PAM platforms.
• Define entitlement and data enforcement patterns to ensure agents access only authorized tools, APIs, and datasets.
• Ensure production‑scale reliability, observability, and operational readiness for agent identity services.
• Design and test MCP‑enabled identity integration flows for agent tools and external access.
• Enable secure external developer, agent, and MCP access through federation, scoped credentials, and gateway controls.
• Transition validated patterns to IAM engineering for production rollout.
• Define agent identity lifecycle (registration, credential rotation, revocation, environment separation).
• Integrate IAM across AI platform components; support CI/CD and IaC for IAM configurations.
• Establish patterns for human‑in‑the‑loop controls, break‑glass access, and rate limiting.
• Maintain documentation, decision records, diagrams, and runbooks.
• Deliver POC summaries, evaluations, and implementation guidance; communicate risks…