Senior Cybersecurity Engineer – Non Human Identity

This is a fully remote position, open to applicants in United States.

📋 Description

• Collaborate with Architecture, IAM, cloud, platform, DevOps, and application teams to design, develop, and manage enterprise-level NHI discovery, governance, and lifecycle automation.

• Identify non-human identities across servers, applications, cloud platforms, and CI/CD pipelines.

• Analyze configuration files, logs, APIs, and Infrastructure-as-Code to uncover embedded or hard-coded credentials.

• Enrich NHI metadata, encompassing ownership, purpose, environment, and lifecycle state.

• Automate processes for ownership validation, lifecycle tracking, reporting, onboarding, access reviews, credential rotation, and decommissioning.

• Integrate NHI workflows with IAM/PAM, Cloud IAM, secrets management, ITSM/workflow, and PKI platforms.

• Examine authentication flows and transform legacy patterns into managed identities, OAuth client credentials, and short-lived tokens.

• Assist in security monitoring and incident response investigations related to service account misuse, unusual automation behavior, or credential compromise.

• Utilize pattern recognition, baselining, and anomaly indicators to evaluate NHI usage and detect drift or misuse.

• Aid in the governance of AI agents as non-human identities, focusing on ownership, scoped access, and lifecycle expectations.

• Support certificate-based NHIs, ensuring that certificates and private keys adhere to approved issuance, rotation, and expiration standards.

• Generate technical documentation, runbooks, onboarding guides, audit evidence, and reporting materials.

• Develop capabilities for threat hunting, data analysis, and cybersecurity threat defense.

• Detect malicious activities and take proactive measures against emerging threats.

• Design, build, configure, maintain, and monitor cybersecurity threat defense capabilities and user access management.

• Continuously enhance the NHI program by identifying automation opportunities and minimizing operational toil.

⛳️ Requirements

• Must be at least eighteen years old.

• Must be legally authorized to work in the United States.

• High school diploma and/or GED is required.

• A minimum of 3 years of work experience.

• Experience in non-human identity discovery, governance, and lifecycle automation.

• Proficient in Python and PowerShell automation and tooling.

• Ability to parse configuration files, logs, APIs, and Infrastructure-as-Code.

• Experience in integrating IAM/PAM, Cloud IAM, secrets management, ITSM/workflow, and PKI/certificate management platforms.

• Knowledge of managed identities, OAuth client credentials, short-lived tokens, TLS, mTLS, and client authentication.

• Familiarity with Zero Trust principles and cybersecurity standards.

• Capable of creating technical documentation, runbooks, onboarding guides, audit evidence, and reporting materials.

🏝️ Benefits

• Remote/Virtual work arrangement.

• No travel required.