Security Architect Agentic Identity & Access Management 100% Remote

Security Architect Agentic Identity & Access Management 100% Remote Role Overview We are looking for a Security Architect to design and lead security architecture for Agentic Identity & Access Management (IAM) capabilities. The role will focus on securing AI agents, autonomous workflows, machine identities, and human-to-agent interactions across enterprise environments. Key Responsibilities Define security architecture and IAM patterns for AI agents, agentic workflows, APIs, workloads, and machine identities. Design authentication, authorization, identity lifecycle, privilege management, and access-control models for autonomous agents. Establish Zero Trust principles for agent-to-agent, agent-to-application, and agent-to-human interactions. Define controls for agent identity, credential/token management, delegation, impersonation, and least-privilege access. Develop policies for dynamic/risk-based authorization and context-aware access decisions. Integrate agentic IAM with enterprise IAM/PAM platforms, cloud environments, APIs, and security controls. Address security risks including agent identity spoofing, privilege escalation, excessive permissions, credential theft, and unauthorized autonomous actions. Define security guardrails, monitoring, auditability, and traceability for agent actions and decisions. Partner with engineering, IAM, cybersecurity, cloud, data, and AI teams to embed security into agentic solutions. Conduct architecture reviews, threat modeling, risk assessments, and security design reviews. Define reference architectures, security standards, patterns, and implementation guidelines. Required Skills & Experience 8+ years of experience in Cybersecurity / Security Architecture / IAM, with strong enterprise security experience. Strong understanding of IAM, IGA, PAM, RBAC/ABAC, OAuth 2.0, OIDC, SAML, API security, and Zero Trust. Experience designing security architectures for cloud and distributed environments. Understanding of AI/GenAI and agentic architectures, including AI agents, LLM applications, tool/API calling, and autonomous workflows. Experience with identity platforms such as Microsoft Entra ID, Okta, CyberArk, Ping, SailPoint, or equivalent technologies. Strong knowledge of cloud security across AWS, Azure, and/or GCP. Experience with threat modeling and security frameworks such as NIST, OWASP, and Zero Trust Architecture. .