Cybersecurity Senior Engineer - Non Human Identity (Remote)

The Home Depot•GEORGIA - VIRTUAL - GA01, GA

10d•$120,000 - $160,000•Remote

About The Position

The Senior Cybersecurity Engineer – Non‑Human Identity (NHI) partners with Architecture, IAM, cloud, platform, DevOps, and application teams to design, build, and operate enterprise‑scale discovery, governance, and lifecycle automation for non‑human identities (NHIs). NHIs include service accounts, API tokens, cloud IAM roles, automation identities, CI/CD identities, and AI agents across on‑premises, hybrid, and multi‑cloud environments. This role focuses on automation, collaboration, and risk reduction, helping modernize authentication patterns and reduce reliance on long‑lived credentials.

Requirements

Must be eighteen years of age or older.
Must be legally permitted to work in the United States.
3 years of work experience.

Nice To Haves

Experience with Non-Human Identity Discovery & Automation.
Experience with Python, PowerShell.
Experience with IAM, Architecture, and platform teams.
Experience with NHI lifecycle and governance.
Experience with ITSM and workflow tools.
Experience with AI Agent Identity Governance.
Basic PKI Responsibilities (Foundational).
Experience with certificate-based NHIs (e.g., TLS, mTLS, client authentication).
Experience with enterprise PKI and certificate management platforms.
Experience aligning NHI controls with Zero Trust principles.
Experience producing and maintaining technical documentation, runbooks, and onboarding guides.
Experience supporting audit and compliance activities.

Responsibilities

Design and operate automated discovery capabilities for NHIs across servers, applications, cloud platforms, and CI/CD pipelines.
Contribute to development of automation and tooling (Python, PowerShell) to discover NHIs, parse configuration files, logs, APIs, and Infrastructure‑as‑Code to identify embedded or hard‑coded credentials, and enrich NHI metadata.
Partner with engineering teams to automate NHI hygiene activities such as ownership validation, lifecycle tracking, and reporting.
Design and integrate NHI lifecycle workflows, including onboarding, access reviews, credential rotation, and decommissioning.
Integrate NHI workflows with enterprise platforms, including IAM and PAM solutions, Cloud IAM services, Secrets management platforms, ITSM and workflow tools.
Support enforcement of clear ownership, purpose, and lifecycle accountability for NHIs.
Assist with enterprise access reviews, attestations, and audit evidence generation.
Analyze authentication flows and refactor legacy patterns toward modern, password‑less NHI designs, including managed identities, OAuth client credentials, and short‑lived tokens.
Provide NHI context to security monitoring and incident response teams to support investigations involving service account misuse, anomalous automation behavior, or credential compromise.
Apply data‑driven techniques such as pattern recognition, baselining, and anomaly indicators to analyze NHI usage trends and detect drift or misuse.
Support onboarding and governance of AI agents as non‑human identities.
Help ensure AI agents have clearly defined ownership, scoped access, and documented lifecycle expectations.
Support certificate‑based NHIs (e.g., TLS, mTLS, client authentication) as part of broader NHI governance.
Integrate NHI discovery and lifecycle workflows with enterprise PKI and certificate management platforms.
Ensure certificates and private keys follow approved standards for issuance, rotation, and expiration.
Collaborate across security, cloud, and platform engineering teams to align NHI controls with Zero Trust principles and THD security standards.
Produce and maintain technical documentation, runbooks, and onboarding guides, and support audit and compliance activities through NHI evidence and reporting.
Continuously improve the NHI program by identifying automation opportunities, reducing operational toil, and improving accuracy, coverage, and maturity of non‑human identity controls.
Design automation workflows and capabilities in support of data collection, investigation and incident response.
Develop threat hunting and data analysis strategy and capabilities.
Identify and propose new technologies, methodologies and/or approaches to detecting malicious activity.
Utilize indicators to scope and respond proactively to emerging threats.
Design, build, configure, maintain and monitor cybersecurity threat defense capabilities and user access management.