AVP, IAM AI Engineer
LPL Financial1 day ago
Austin, TX, USA +3 moreStaff+
Base Salary
$123k - $204k/yr
Responsibilities
- Automate identity runtime controls for human and non-human identities, including authentication, authorization, and policy enforcement.
- Design and govern the provisioning, entitlement, rotation, certification, attestation, and deprovisioning lifecycle for AI agents and non-human identities.
- Develop secrets-management workflows for AI systems, including rotation, just-in-time credentials, ephemeral credentials, and secure secret delivery.
- Define least-privilege authorization models and implement policy-as-code for agents and workloads.
- Establish identity reference architectures and standards for user-to-agent, agent-to-agent, and workload-to-service authentication and authorization.
- Partner with engineering and data science teams to embed IAM, authentication, authorization, and secrets handling into AI applications.
- Support deployment and adoption of IAM controls for end users.
- Integrate identity telemetry with SIEM and SOC tooling, build monitoring and anomaly detection, and support incident response.
- Partner with GRC, risk, and audit stakeholders to satisfy regulatory requirements and produce audit evidence.
- Recruit, mentor, and lead a technical team while setting direction and roadmap for non-human and agentic IAM.
Requirements
- At least 5 years of identity and access management or information security experience, including hands-on engineering.
- Demonstrated experience building or leading technical teams.
- At least 5 years of experience with Ping Identity, including PingFederate, PingOne, and/or PingAccess, or a comparable access-management or federation platform.
- At least 5 years of experience with SailPoint, including IdentityIQ and/or Identity Security Cloud, or a comparable identity governance and administration platform.
- At least 3 years of experience with Idira, CyberArk formerly Conjur, HashiCorp Vault, or a comparable secrets-management platform.
- Working knowledge of IAM and authorization for users and agents, including user-to-agent and agent-to-agent patterns, OIDC, OAuth 2.0/2.1 tokens, and API keys.
- Proficiency in a scripting or programming language such as Python, infrastructure-as-code such as Terraform, CI/CD pipelines, and REST API integration.
- Experience applying IAM in AWS, Azure, and/or GCP cloud environments and containerized or Kubernetes workloads.
- Familiarity with SPIFFE/SPIRE, OAuth token exchange RFC 8693, mTLS, and cloud workload-identity federation.
- Working understanding of LLMs, agent frameworks, tool-calling, and authentication patterns such as the Model Context Protocol.
- Experience in a regulated industry and relevant compliance regimes is preferred.
- Relevant certifications such as CISSP, CyberArk Defender or Sentry, SailPoint, Ping, or a major cloud security certification are preferred.
- Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
Benefits
- Hybrid work arrangement.
- 401(k) matching, health benefits, employee stock options, paid time off, and volunteer time off.
Categories
About LPL Financial
LPL Financial is a public wealth management platform and the largest independent broker-dealer, providing brokerage, custody, clearing, research, and advisor technology to independent financial advisors and financial institutions. Its revenue comes from advisory and brokerage fees, commissions, and clearing and service fees across multiple affiliation models. Founded in 1989 and headquartered in San Diego, it trades on Nasdaq (LPLA) and supports more than 29,000 advisors and roughly 1,100 institutions nationwide.