Security Admin Identity & Access Mgt Ma

Softtek•Dallas, TX

About The Position

Define the enterprise target-state architecture and governance model for identities, delegated authority, and authorization across AI applications, agents, tools, APIs, and human users. Establish reusable authorization patterns for user-to-agent, agent-to-tool, machine-to-machine, and agent-to-agent interactions. Design policy enforcement approaches that support least privilege, ZSP, separation of duties, context-aware access, runtime decisioning, and human-in-the-loop guardrails. Define lifecycle governance for AI agents and other non-human identities, including registration, sponsorship, ownership, credential issuance, rotation, recertification, suspension, deprovisioning, and evidence retention. Develop standards for OAuth 2.0, OIDC, token exchange, workload identity, delegated authorization, service accounts, and short-lived credentials. Evaluate vendor and native platform capabilities; document options, tradeoffs, integration impacts, risks, and recommendations for Client. Partner with IAM, IGA, PAM, Enterprise Access Management, Cloud Security, Application Security, AI Engineering, AI Governance, Enterprise Architecture, and platform teams to align controls and operating responsibilities. Create reference architectures, design principles, control requirements, decision records, implementation roadmaps, and adoption guidance. Support solution reviews and threat-informed design decisions for AI use cases, MCP servers, agent tools, data access paths, and autonomous actions. Define logging, traceability, audit evidence, and monitoring requirements that connect an agent action to the agent identity, sponsoring owner, delegated user or system, authorization decision, and affected resource. Provide technical leadership and consultation to Cyber teams; translate complex IAM and AI security concepts into clear decisions for engineers, product teams, leaders, and governance forums. Track relevant market and technology developments and recommend updates to architecture standards and strategic roadmaps.

Requirements

High School Diploma, GED or equivalent education required.
Must be at least 18 years of age.
Must have authorization to work in the United States as defined by the Immigration Reform Act of 1986.
College degree in Technology, Finance, Business or equivalent work experience
Minimum 3 years’ experience solving complex problems and driving multiple stakeholders towards implementable solutions
Minimum 3 years’ experience developing communication strategies for buy-in and acceptance
Minimum 3 years working in a cross-functional environment within technology domain
Ability to influence diverse customer groups to align on strategic goals and decisions
Deep expertise in enterprise Identity and Access Management (IAM) architecture and integration patterns for AI systems and agent-based environments
Understanding of best practices for authorization enforcement across AI agents, tools, APIs, and human identities
Knowledge of core authorization principles such as least privilege access, Zero Standing Privilege (ZSP), policy enforcement, auditability, and runtime governance
Experience designing OAuth 2.0 / OIDC flows for machine-to-machine and agent-to-agent communication
Understanding of AI agent lifecycle governance — registration, credential rotation, deprovisioning, and auditability of autonomous actions
Familiarity with AI safety/governance frameworks (NIST AI RMF, OWASP Top 10 for LLMs) and regulatory/compliance considerations for autonomous systems
Strong communication and cross-team collaboration skills; ability to translate complex IAM concepts for engineering and leadership audiences
Strong hands-on knowledge of: Privileged Access Management (PAM), Directory services (AD, eDirectory, LDAP), Workforce/Enterprise IAM, CIAM platforms and patterns
Experience in cloud-based IAM (AWS, Azure, hybrid environments)
Ensure IAM solutions align with Zero Trust, least privilege, and identity-first security principles.
Exceptional attention to detail, with strong documentation skills.
Self-motivated, proactive, and committed to driving tasks to completion.
Ability to connect how and programs integrate with company objectives.
Experience solving complex problems (Business and Technical) and identifying options for solutions.
Experience supporting (or leading) Executive-level communication (e.g. project status updates, presentations requesting approval, Multiyear Roadmaps, Financial health etc.)
Ability to digest significant amount of detail and summarize relevant information for the appropriate stakeholder (e.g., Managers, Directors, VPs, etc.)
Experience with or thorough understanding the process for gathering business requirements for an implementation project.
Understands how to translate business needs into releases that strategically deliver business value.
Ability to translate business process into strategy and drive innovation that builds capabilities.
Understands how to read market landscape and implement best practices to remain competitive.
Ability to lead discussions with stakeholders from multiple backgrounds who have conflicting priorities; act as mediator if Teams are not aligned and drive towards a recommendation or solution.
Ability to use critical thinking to identify, analyze and interpret trends and patterns in complex data sets to solve problems, and develop recommendations based on findings.
Strong oral communication and presentation delivery skills when facilitating discussions at the Executive level.
Skilled influencer, negotiator, consensus-builder, and change agent.
Display ability to recognize inefficiencies with processes/procedures and proactively offer suggestions for improvements – ability to take items a step further, not just follow defined path (continue process because it is the same as it is today).
Must be able to work remain flexible and work in the grey as priorities may shift to meet enterprise objectives.
Must be able to comply with Company attendance standards as described in established guidelines.

Nice To Haves

prefer 5 years of experience solving complex problems and driving multiple stakeholders towards implementable solutions
prefer 5 years of experience developing communication strategies for buy-in and acceptance
prefer 5 years of experience working in a cross-functional environment within technology domain
2 years or more of experience in Cybersecurity Identity and Access Management domain preferred
Prefer at least 1 year working in a Scaled Agile Framework (SAFe) environment.
Consulting experience (highly desired)
Built and maintained communication strategy for diverse user group (highly desired)
Must have the ability to assume a high-level responsibility and to provide direction in a cross-functional, team-oriented environment
Ability to quickly ramp up when placed in new areas business (proactively engage all levels the organization to expand functional understanding.
Proficiency in Agile methodologies, collaborating effectively with cross-functional teams.
Technology expertise: AWS AgentCore, SailPoint Identity Security Cloud, Ping Identity Platform, CyberArk
Technology expertise: Ping Agent IAM Core module, SailPoint Entro Security, CyberArk Idira, CrowdStrike, Microsoft Foundry, Microsoft EntraID
Experience with secrets management and credential vaulting (e.g., CyberArk, HashiCorp Vault, AWS Secrets Manager)
Experience IAM tools such as CyberArk, BeyondTrust, Ping, Azure AD, SailPoint, or similar

Responsibilities

Define the enterprise target-state architecture and governance model for identities, delegated authority, and authorization across AI applications, agents, tools, APIs, and human users.
Establish reusable authorization patterns for user-to-agent, agent-to-tool, machine-to-machine, and agent-to-agent interactions.
Design policy enforcement approaches that support least privilege, ZSP, separation of duties, context-aware access, runtime decisioning, and human-in-the-loop guardrails.
Define lifecycle governance for AI agents and other non-human identities, including registration, sponsorship, ownership, credential issuance, rotation, recertification, suspension, deprovisioning, and evidence retention.
Develop standards for OAuth 2.0, OIDC, token exchange, workload identity, delegated authorization, service accounts, and short-lived credentials.
Evaluate vendor and native platform capabilities; document options, tradeoffs, integration impacts, risks, and recommendations for Client.
Partner with IAM, IGA, PAM, Enterprise Access Management, Cloud Security, Application Security, AI Engineering, AI Governance, Enterprise Architecture, and platform teams to align controls and operating responsibilities.
Create reference architectures, design principles, control requirements, decision records, implementation roadmaps, and adoption guidance.
Support solution reviews and threat-informed design decisions for AI use cases, MCP servers, agent tools, data access paths, and autonomous actions.
Define logging, traceability, audit evidence, and monitoring requirements that connect an agent action to the agent identity, sponsoring owner, delegated user or system, authorization decision, and affected resource.
Provide technical leadership and consultation to Cyber teams; translate complex IAM and AI security concepts into clear decisions for engineers, product teams, leaders, and governance forums.
Track relevant market and technology developments and recommend updates to architecture standards and strategic roadmaps.