Non-Human Identity (NHI) Specialist

Do you love a career where you Experience, Grow & Contribute at the same time, while earning at least 10% above the market? If so, we are excited to have bumped onto you.

Learn how we are redefining the meaning of work, and be a part of the team raved by Clients, Job-seekers and Employees.

• Jobseeker Video Testimonials
  
• Employee Glassdoor Reviews
  

If you are a Non-Human Identity (NHI) Specialist looking for excitement, challenge and stability in your work, then you would be glad to come across this page.

We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long-term project. Here are a few details.

Check if you are up for maximizing your earning/growth potential, leveraging our Disruptive Talent Solution.

Requirements

Non-Human Identity (NHI) Specialist

We are seeking a Non-Human Identity (NHI) Specialist to design and implement modern identity security controls for machines, services, applications, and AI agents. This role blends traditional Privileged Access Management (PAM) expertise with modern cloud-native and workload identity security, ensuring secrets, certificates, and non-human credentials are governed with the same rigor as human identities.

Responsibilities

· Design, implement, and manage secrets management solutions (e.g., CyberArk Conjur, HashiCorp Vault, Azure Key Vault, AWS Secrets Manager) including secret rotation, dynamic secrets, and vaulting policies

· Architect and enforce least-privilege IAM/PAM policies, roles, and entitlements for service accounts, applications, and automation identities

· Implement Just-In-Time (JIT), and ephemeral credential models to eliminate persistent privileged access for non-human identities

· Manage Certificate/PKI lifecycle (issuance, rotation, revocation) for machine and workload identities

· Configure and govern Cloud IAM across AWS, Azure, and GCP, including IAM roles and cross-account access (AWS), service principals and managed identities (Azure), and service accounts with workload identity federation (GCP)

· Implement OAuth 2.0, OpenID Connect, and JWT-based authentication/authorization flows for service-to-service and API access

· Design and deploy Workload Identity solutions (e.g., SPIFFE/SPIRE, Kubernetes service accounts, cloud workload identity federation) to eliminate long-lived credentials

· Establish access control frameworks and guardrails for AI agents and autonomous systems, including scoped permissions, audit trails, and behavioral monitoring

· Establish continuous discovery of non-human identities (service accounts, API keys, tokens, certificates, secrets) through automated tooling or repeatable processes across cloud, on-prem, CI/CD, and SaaS environments

· Build, analyze and maintain NHI inventory, risk scoring, and remediation programs to identify and eliminate orphaned, over-privileged, or stale non-human credentials

· Onboard and integrate platforms (cloud, on-prem, containers, databases) into NHI/PAM governance frameworks

· Develop automation using PowerShell, Python, Terraform, and REST APIs for identity provisioning, rotation, and compliance reporting

· Support integrations with SIEM, MFA, CI/CD pipelines, and secret scanning tools

· Conduct risk assessments and drive remediation of non-human identity findings across the enterprise

· Document architecture, standards, and runbooks; collaborate with security, platform, and application teams

Required Qualifications

· Bachelor's or Master's degree in Computer Science, Information Security, or related field

· Hands-on experience with secrets management platforms (CyberArk Conjur, HashiCorp Vault, or cloud-native equivalents)

· Experience with IAM/PAM concepts including roles, policies, entitlements, and least-privilege enforcement

· Practical experience implementing Just-In-Time access, and ephemeral credential/session models

· Proficiency building NHI remediation and governance programs, including inventory, risk scoring, and lifecycle management of non-human identities

· Working knowledge of PKI/certificate lifecycle management

· Practical experience with Cloud IAM across at least one major provider (AWS, Azure, or GCP)

· Solid understanding of OAuth 2.0, OpenID Connect, and JWT token-based authentication

· Familiarity with workload identity concepts (SPIFFE/SPIRE, managed identities, federated identity)

· Proficiency in PowerShell, Python, or API/SDK-based automation

· Strong communication, documentation, and cross-team collaboration skills

Preferred Qualifications

· Experience securing AI agent/agentic workflows, including scoped credential issuance and runtime access control

· Certifications: CyberArk CDE, AWS/Azure Security certifications, HashiCorp Vault Associate

· Experience with Kubernetes secrets, service mesh identity (Istio/Linkerd), or SPIFFE/SPIRE

· Background in DevSecOps, CI/CD pipeline security, or secret scanning tooling

· Experience deploying or operating NHI discovery tooling (Token, Astrix, Oasis, Clutch etc. ) to continuously identify and inventory non-human identities across environments

Benefits