AI Identity Security Engineer (Sailpoint)

Regions Bank•Hoover, AL

1d•$133,060 - $166,810•Remote

About The Position

The AI Identity Security Engineer owns lifecycle and access governance foundations for AI agents and non-human identities (NHIs), anchored in SailPoint and enterprise IAM systems. The role establishes and scales access review, certification, and provisioning processes for AI and agentic use cases, and matures NHI identity governance through consistent onboarding, entitlement management, and automated deprovisioning controls. The engineer collaborates with security, authorization, and platform teams to align lifecycle controls with runtime enforcement and policy decision points, and advances a roadmap for centralized governance of agent identity, access, and compliance across cloud environments. The posting also describes responsibilities for advancing cloud strategy by developing and implementing secure, automated CI/CD pipelines and supporting cloud deployments. The role partners across engineering, IT, architecture, information security, software delivery, and quality assurance to automate builds, testing, deployment, infrastructure, and operational tasks; improve pipeline reliability and customer experience; investigate incidents; and support compliance and disciplined change management. This is a full-time position currently performed primarily from home. Associates may be expected to attend meetings or events onsite as needed, preferably near a Regions office within its retail branch footprint. The listed location is the Riverchase Operations Center in Hoover, Alabama. The position is exempt from timekeeping requirements under the Fair Labor Standards Act and is not eligible for overtime pay.

Requirements

High school diploma or GED and eight years of related post-secondary education and/or experience in Information Security or Information Technology.
Strong background in identity governance automation, IAM, or DevSecOps, with hands-on engineering experience.
Hands-on experience developing and customizing solutions within SailPoint, including writing and maintaining custom code.
Proven experience automating access reviews and certification processes for non-human identities.
Advanced proficiency in SQL and Java, including the ability to build, optimize, and troubleshoot complex solutions.
Ability to interpret and ensure compliance with applicable rules, regulations, and industry guidance.
Excellent communication skills and willingness to mentor developers and other team members in DevSecOps.
Excellent knowledge of cloud infrastructure, networking, services, and architectural patterns, including virtual machines, managed infrastructure, containers, serverless, database services, security services, and application services.
Proficiency in Python.
Understanding of Shift Left principles and enabling technologies.

Nice To Haves

Four years of relevant DevSecOps experience.
AWS DevOps or Azure DevOps certification.
Experience building or deploying cloud-native applications using OpenShift or Azure Kubernetes Service (AKS).
Experience observing real-time pipeline metrics and using deployment strategies such as blue/green and canary deployments.
Experience with AWS or Azure cloud technologies.
Experience interfacing with secrets management solutions such as HashiCorp Vault.
Familiarity with implementing chaos engineering principles in pipelines to identify weak links and suggest solutions.
Familiarity with testing tools used to facilitate automation and integrating those tools into CI/CD pipelines.
Comfort developing pipelines as code using YAML specifications and Ansible playbooks.
Working knowledge of Jenkins, Azure DevOps, Ansible, Terraform, Packer, Git, and ServiceNow.
Familiarity with AI/ML systems, agentic architectures, and their associated security risks.

Responsibilities

Own lifecycle and access governance foundations for AI agents and non-human identities, anchored in SailPoint and enterprise IAM systems.
Establish and scale access review, certification, and provisioning processes tailored to AI and agentic use cases.
Mature identity governance for non-human identities, including consistent onboarding, entitlement management, and automated deprovisioning controls.
Collaborate with security, authorization, and platform teams to align lifecycle controls with runtime enforcement and policy decision points.
Drive the roadmap toward centralized governance of agent identity, access, and compliance across cloud environments.
Partner with engineers and IT staff to orchestrate code builds, quality and security analyses, deployments, and automated testing through CI/CD release candidate pipelines.
Translate business needs into technology solutions and model release candidate pipelines to communicate the states and steps required for application and service releases.
Design and develop autonomous CI/CD pipelines that automate cloud infrastructure, services, application builds, and deployments.
Ensure pipeline components follow sound software engineering practices, including automated tests and infrastructure tests.
Research technologies that improve efficiency and effectiveness, and implement scalable CI/CD platforms for high change volumes and fast feedback.
Automate operational activities and tasks; respond to performance issues identified by alerts and incidents related to CI/CD platforms.
Build tools to reduce errors and improve customer experiences; assist with production troubleshooting and support clear pipeline and infrastructure documentation and metrics for root-cause analysis.
Develop and test Ansible playbooks, Terraform scripts, and Packer scripts, and establish immutable infrastructure.
Work with Enterprise Architecture, Information Security, Software Delivery, and Quality Assurance to enable cloud adoption through automation.
Ensure compliance with risk management programs, rules, regulations, and cybersecurity practices; identify and support process improvements and apply disciplined change management practices.