Agentic Identity with Zero Trust Security Architect – Principal

Client is willing to work with us but wants us to show two sample resumes before officially putting us on the vendor list.

Experience

5–7 years

Location

Remote

Relocation

Candidates should be willing to relocate to New York if required by the client.

Sample Description

I pulled from internet but give basic overview of this type of position,

An Agentic Identity & Zero Trust Security Architect designs, builds, and governs security frameworks for autonomous AI agents, non-human identities (NHIs), and multi-agent workflows. [1]

Core Responsibilities

Key Qualifications & Requirements

• Experience: 8+ years in information security, enterprise identity and access management (IAM), or cloud security architecture.
• Technical Stack: Deep fluency in OAuth 2.1/OIDC, SAML, PKI, secret management, and Python/TypeScript or agent frameworks (LangGraph, Semantic Kernel).
• Agent Identity & Lifecycle: Establish distinct, cryptographic identities for AI agents instead of relying on shared API keys. [1]
• Zero Trust Architecture: Apply Zero Trust principles (NIST SP 800-207) to agent-to-agent, agent-to-application, and agent-to-human interactions. [1, 2]
• Dynamic & Least-Privilege Authorization: Design fine-grained scope models, step-up/risk-based authentication, and continuous token verification beyond standard OAuth/OIDC limitations. [1, 2, 3]
• Threat Mitigation & Containment: Guard against prompt injection, privilege escalation, credential theft, and unauthorized autonomous actions using circuit breakers or kill switches. [1, 2, 3]
• IAM & Tool Integration: Connect agentic workflows with enterprise IAM/PAM platforms such as Microsoft Entra ID, CyberArk, SailPoint, Okta, or Ping. [1, 2]
• Visibility & Shadow AI Discovery: Build security posture management (SPM) for agent registries, MCP (Model Context Protocol) servers, and orchestrators. [1]