Lead Cybersecurity Non-Human Identity and Cloud IAM Governance

• Define and drive the enterprise NHI strategy across on-premises, cloud, SaaS, and agentic environments, aligning in-flight efforts into one centralized operating model.
• Build the NHI governance framework for discovery, registry, ownership, classification, lifecycle, access reviews, credential security, and observability.
• Lead technical architecture and integrations across IAM, IGA, PAM, secrets management, AWS, Azure, GCP, SaaS, DevOps, monitoring, and agentic platforms.
• Establish governance for AI agents and agentic workloads, ensuring each is inventoried, ownership-mapped, access-controlled, and visible for monitoring.
• Drive modern credential controls including JIT access, dynamic secrets, short-lived certificates, automated rotation, runtime authentication, and least privilege.
• Serve as a hands-on technical escalation point for complex NHI, cloud IAM, credential, entitlement, integration, and observability issues.
• Define KPIs, dashboards, standards, runbooks, and remediation playbooks to track maturity, risk reduction, and program progress.

• 12+ years of enterprise experience in IAM, cybersecurity, cloud IAM, PAM, IGA, infrastructure security, or machine identity governance.
• Strong hands-on experience with NHI governance across service accounts, APIs, application identities, bots, RPA, cloud workload identities, and agentic workloads.
• Proven ability to lead by doing review designs, guide engineers, validating integrations, troubleshoot complex issues, and making technical architecture decisions.
• Experience maturing NHI programs across discovery, ownership mapping, lifecycle governance, access reviews, credential controls, and remediation.
• Strong knowledge of AWS IAM, Azure Entra ID, and/or GCP IAM, including integration with IGA, PAM, secrets management, and monitoring platforms.
• Experience with modern credential security patterns including JIT access, dynamic secrets, short-lived certificates, automated rotation, runtime authentication, and least privilege.
• Ability to assess risk from privileged service accounts, unmanaged NHIs, API credentials, cloud workload identities, and AI agents.
• Strong executive communication and stakeholder management skills across IAM, PAM, IGA, cloud, AI platform, application, security, audit, and business teams.
• Certified Information Systems Security Professional (CISSP) or Certified Cloud Security Professional (CCSP) required.

• Experience with agentic AI governance, AI platform security, autonomous workload controls, or AI agent identity risk management.
• Experience with Oasis, SailPoint, CyberArk, HashiCorp Vault, Azure Entra ID, AWS IAM, GCP IAM, ServiceNow, CI/CD tooling, or cloud-native security services.
• Knowledge of zero trust, least privilege, privileged access management, identity threat detection, and machine identity security patterns.
• Familiarity with regulatory, audit, and control frameworks such as NIST, ISO, SOC2, and internal enterprise risk standards.
• Strong organizational, program management, documentation, self-motivation, and stakeholder management skills.
• Interest in leveraging automation or AI-enabled tools to improve identity discovery, risk scoring, remediation tracking, reporting, and operational response workflows.

• Play a key role in building AT&T’s enterprise NHI governance capability at a time when machine identities and AI agents are becoming a critical cybersecurity priority.
• Work on high-scale IAM, cloud IAM, PAM, secrets management, and agentic identity integrations that directly reduce enterprise risk.
• Collaborate directly with teams across India and the US on a strategic identity security capability that improves governance, visibility, access control, and operational resilience.

Weekly Hours:

Time Type:

Location:

AT&T and its subsidiaries are committed to equal employment opportunity. All hiring, promotion, and other employment decisions remain merit-based and free from discrimination on the basis of race, color, religion, religious creed, national origin, ancestry, age, sex, sexual orientation, gender, gender identity, gender expression, physical disability, mental disability, pregnancy, medical condition, genetic information, marital status, citizenship status, military status, veteran status, or any other characteristic protected by federal, state, or local laws. In addition, AT&T will provide reasonable accommodations to qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made. Click here to learn more or request an application accommodation here.