Agentic Identity & Access Management Architect 

Job Summary
Our client, a leading Travel and Hospitality provider, is seeking a Agentic Identity & Access Management Architect to join their team.

Contract Details

• Contract type and duration: 12 Month
• Location: USA
• Work Model: Remote

Core Responsibilities

• Define target-state identity, authorization and governance architecture for AI applications, agents, tools, APIs, systems and users. 
• Design reusable authorization patterns for user-to-agent, agent-to-tool, machine-to-machine and agent-to-agent interactions. 
• Establish policies for least privilege, Zero Standing Privilege, separation of duties, context-aware access, runtime decisions and human approval. 
• Define the full lifecycle for AI agents and non-human identities, including ownership, credentials, rotation, recertification, suspension, deprovisioning and evidence retention. 
• Develop standards for OAuth 2.0, OIDC, token exchange, workload identity, delegated authorization, service accounts and short-lived credentials. 
• Evaluate native and vendor capabilities and document tradeoffs, risks, integration impacts and recommendations. 
• Create reference architectures, control requirements, design decisions, roadmaps and adoption guidance. 
• Define logging and traceability that connect an agent action to its identity, owner, delegated user/system, authorization decision and affected resource.
• Partner across IAM, IGA, PAM, cloud security, application security, AI engineering, AI governance and enterprise architecture

Required Skills/Experience (Must-Haves)

• Deep enterprise IAM architecture and integration experience, including strong hands-on knowledge of PAM, directory services, workforce IAM and customer identity patterns
• Experience designing OAuth 2.0/OIDC and authorization flows for machine-to-machine, workload or agent-based interactions
• Practical knowledge of non-human identity and AI-agent lifecycle governance
• Strong understanding of least privilege, Zero Trust, Zero Standing Privilege, policy enforcement, runtime governance and auditability
• Cloud IAM experience across AWS and/or Azure/hybrid environments
• Experience with major IAM, IGA, PAM or secrets-management platforms such as SailPoint ISC, SailPoint Entro, Ping Identity, CyberArk, Entra ID, HashiCorp Vault or AWS Secrets Manager
• Ability to produce reference architectures and translate complex IAM decisions for engineers, product teams and leadership
• Experience leading cross-functional stakeholders toward implementable solutions in a complex enterprise environment

Preferred Skills/Experience (Nice-to-Haves)

• College degree in Technology, Information Security, Business, Finance, or equivalent professional experience
• Experience with SailPoint Identity Security Cloud and SailPoint IdentityNow/Identity Governance solutions
• Knowledge of CyberArk privileged access management (PAM), secrets management, and CyberArk Identity capabilities
• Experience with the Ping Identity Platform, including authentication, federation, and identity access management solutions
• Familiarity with AWS IAM and cloud identity/security best practices within AWS environments
• Experience with Microsoft Entra ID and Microsoft Azure AI Foundry (formerly Azure AI Studio)
• Exposure to CrowdStrike capabilities related to endpoint, identity, and agent security monitoring
• Familiarity with the NIST AI Risk Management Framework (AI RMF) and OWASP guidance for LLM, generative AI, and autonomous-agent security
• Consulting experience and exposure to SAFe or other large-scale Agile delivery frameworks
• Experience supporting enterprise AI security, identity governance, or cloud security initiatives

Key Competencies & Behaviors

• AI Security Threat Analysis
• Threat Detection Optimization
• Security Monitoring Excellence
• Adversarial Thinking Mindset
• Incident Response Readiness
• Identity & Access Security
• Cloud Security Expertise
• Security Architecture Insight
• Risk Assessment Capability
• Controls Mapping Proficiency

• Location: USA
• Work Model: Remote

Compensation & Benefits

• Pay Range: The approximate pay range for this position is between $154,000 and $220,000. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums.
• Medical, Dental, & Vision Insurance Plans
• Employee-Owned Profit Sharing (ESOP)
• 401K offered

About KellyMitchell
At KellyMitchell, our culture is world class. We’re movers and shakers! We don’t mind a bit of friendly competition, and we reward hard work with unlimited potential for growth. This is an exciting opportunity to join a company known for innovative solutions and unsurpassed customer service. We're passionate about helping companies solve their biggest IT staffing & project solutions challenges. As an employee-owned, women-led organization serving Fortune 500 companies nationwide, we deliver expert service at a moment's notice.
 

Marketing Disclosure
By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from KellyMitchell and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at https://www.careers.kellymitchell.com/privacy-policy.

[143629]