Agentic Identity with Zero Trust Security Architect – Principal

Job Description: Agentic Identity with Zero Trust Security Architect – Principal

Position: Agentic Identity with Zero Trust Security Architect – Principal

Experience: 5–7 Years

Job Type: Contract

Location: Remote

Relocation: Must be willing to relocate to New York, NY, if required by the client.

Job Summary

We are seeking an experienced Agentic Identity with Zero Trust Security Architect to design and implement secure identity architectures for modern enterprise environments, with a focus on AI agents, identity governance, and Zero Trust security principles. The ideal candidate will have strong expertise in identity and access management (IAM), authentication and authorization frameworks, privileged access management, and cloud security.

The candidate will help develop secure, scalable, and policy-driven identity solutions that protect users, workloads, applications, and autonomous AI agents across enterprise systems.

Key Responsibilities

• Design and implement Zero Trust security architectures based on identity-centric security principles.
• Develop identity and access management strategies for AI agents, autonomous workloads, applications, APIs, and human users.
• Implement secure authentication, authorization, identity federation, and access control mechanisms.
• Design agent identity lifecycle management, including provisioning, credential management, access policies, and deprovisioning.
• Apply least-privilege access, continuous verification, and risk-based access control.
• Integrate IAM solutions with cloud platforms, enterprise applications, APIs, and security infrastructure.
• Implement privileged access management (PAM), secrets management, and secure credential handling.
• Define identity governance policies, role-based access control (RBAC), and attribute-based access control (ABAC).
• Evaluate security risks associated with AI agents, service identities, non-human identities, and autonomous workflows.
• Collaborate with enterprise architects, cloud engineers, cybersecurity teams, and application developers.
• Establish security standards, architecture documentation, and best practices for identity protection and compliance.
• Support security assessments, threat modeling, vulnerability remediation, and continuous security improvements.

Required Skills and Qualifications

• 5–7 years of experience in cybersecurity, identity and access management, security architecture, or a related field.
• Strong understanding of Zero Trust Architecture and identity-centric security models.
• Hands-on experience with IAM platforms such as Microsoft Entra ID, Okta, Ping Identity, or equivalent solutions.
• Knowledge of authentication and authorization protocols, including OAuth 2.0, OpenID Connect (OIDC), and SAML.
• Experience with identity federation, RBAC, ABAC, and least-privilege access controls.
• Understanding of non-human identities, service accounts, workload identities, and AI agent identity management.
• Knowledge of API security, token-based authentication, credential lifecycle management, and secrets management.
• Familiarity with cloud security architectures across AWS, Microsoft Azure, or Google Cloud Platform.
• Experience with privileged access management and identity governance concepts.
• Strong analytical, problem-solving, communication, and technical documentation skills.

Preferred Qualifications

• Experience securing AI agents, LLM-powered applications, or autonomous workflows.
• Familiarity with emerging standards and approaches for agent identity, delegated authorization, and machine-to-machine security.
• Knowledge of security frameworks such as NIST Zero Trust Architecture, NIST Cybersecurity Framework, and CIS Controls.
• Exposure to SIEM, SOAR, security monitoring, and identity threat detection.
• Experience with policy-as-code, infrastructure-as-code, and security automation.
• Relevant certifications such as CISSP, CCSP, Microsoft Security, Okta, or cloud security certifications.

Work Requirements

• Remote work arrangement.
• Candidates must be willing to relocate to New York, NY, if required by the client.
• Ability to collaborate with cross-functional teams and support enterprise security architecture initiatives.

Ideal Candidate Profile

The ideal candidate combines hands-on IAM expertise with strong Zero Trust architecture knowledge and an understanding of how to secure AI agents and other non-human identities. Candidates should demonstrate pract…