IAM Engineer - AI Security
MUST BE ON W2 - Third Party Recruitment/ Sub Vending not permittedIAM Engineer – AI Security & Infrastructure (Senior)Occasional days required in OfficeOur client is seeking a Senior IAM Engineer to lead the design and implementation of security solutions for AI/ML and Generative AI platforms. This role will bridge AI innovation with enterprise IAM frameworks, focusing on securing non-human identities, AI pipelines, and multi-cloud environments.Key Responsibilities:Design and implement IAM solutions for AI platforms, including non-human identities and cross-cloud accessConduct threat modeling and support mitigation strategies for AI/ML risks (e.g., prompt injection, adversarial attacks)Lead PoCs for emerging AI security technologies and protocols (e.g., MCP, A2A)Secure APIs, authentication flows (OAuth2/OIDC), and AI service consumptionDesign and implement secrets management solutions (e.g., Azure Key Vault, GCP Secret Manager)Establish cloud security baselines, network segmentation, and IAM guardrails across Azure, GCP, and on-premCollaborate with cross-functional teams to translate PoCs into production-ready solutions and IaC controlsSupport AI Red Team initiatives and infrastructure security testingMust-Have Qualifications:Strong experience in IAM design and implementation, including non-human/workload identitiesHands-on experience with cloud platforms (Azure, GCP) and multi-cloud securityExpertise in KMS and cryptography (key lifecycle, encryption patterns, BYOK/CMEK)Experience with API security and authentication protocols (OAuth2, OIDC)Strong Python or scripting experience for automationExperience with Terraform and policy-as-code frameworks (OPA, Sentinel, Azure Policy)Solid understanding of AI/ML security risks and mitigation frameworks (e.g., OWASP LLM Top 10, MITRE ATLAS)Nice-to-Have:Experience with workload identity federation and token exchange (STS)Exposure to AI/ML pipelines and platforms (Databricks, Vertex AI)Experience with event-driven architectures (Pub/Sub, Event Grid)Familiarity with low-code tools (ADF, Logic Apps, Power Automate)Experience supporting AI security reviews or red team initiatives