FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Tech Stack
Tools & technologiesCloudCyber Security
About the role
Key responsibilities & impact- Lead non-human identity program builds for enterprise clients
- Architect SailPoint IdentityIQ and Identity Security Cloud engagements
- Discover and inventory enterprise non-human identities, ownership, usage, authentication, and location
- Define NHI reference architecture across creation, ownership, credential and secret management, rotation, attestation, and decommissioning
- Map AI-agent control landscapes, lifecycles, and control locations
- Produce architecture review board and cybersecurity review artifacts, including architecture diagrams, data and process flows, and detailed security diagrams
- Lead program assessments, vendor and tool evaluations, future-state architecture, governance model design, platform architecture reviews, and product health checks
- Support identity engagements with roadmaps, architecture, and executive-level communication
- Own solution architecture and design authority for NHI platform implementations and SailPoint engagements
- Lead design sessions and proofs of concept; make and document engineering decisions
- Define integration patterns, data models, access models, and non-functional requirements for security, scale, resiliency, and performance
- Guide clients through solutions and progress toward design adoption
- Stay technical enough to unblock complex problems
- Evolve NHI programs as workloads, agents, platforms, and regulatory requirements change
- Guide certification strategy, configuration and tuning, and program reporting
- Lead knowledge transfer and operating-model design for client self-sufficiency
Requirements
What you’ll need- 8+ years in identity and access management, with meaningful time as a solutions architect, technical lead, or principal engineer in at least one identity domain
- Depth in one or more of identity governance (SailPoint IdentityIQ or ISC, Saviynt), privileged access (CyberArk, Delinea, BeyondTrust), or identity provider and authentication platforms (Okta, Microsoft Entra ID, Ping)
- Strong command of IAM service categories: governance, privileged access, secrets management, certificate management, authentication including MFA and identity providers, and authorization
- Understanding of workforce, customer, and non-human identities, including workloads, machine identities, service accounts, API credentials, bots, and AI agents
- Ability to identify enterprise non-human identities and understand tools providing NHI lifecycle visibility
- Working understanding of AI agent types, lifecycles, and controls
- Ability to create complete artifacts for architecture review boards and cybersecurity reviews, including detailed security diagrams
- Genuine client-facing range, including technical and plain-language communication
- Ability to diagnose client problems and explain solutions diplomatically
- Ability to operate independently on smaller engagements
- Evidence of learning or building outside the day job, such as a home lab or side project
- U.S.-based and authorized to work in the United States
Benefits
Comp & perks- Remote-first, U.S. based
- Flexible hours, with client time zones taking priority when an engagement calls for it
- 20 days of paid time off, granted as a bucket rather than accrued, plus holidays
- Medical, dental, and vision coverage through Aetna
- 401(k) with company match: full match on the first 3% and half match on the next 2%
- Annual performance-based bonus eligibility
- Sponsored training and certifications, including platform-specific enablement
- Direct client work, real ownership, and a seat at a boutique early enough that your work shapes the firm
- Structured internal enablement program before client-facing NHI work
- Palyrian funds training and certification across SailPoint and NHI platforms, including Oasis enablement
