About this role
Overview The Non-Human Identity Engineer is responsible for the design, implementation, and management of identity and access management (IAM) solutions for non-human entities, including applications, devices, APIs, bots, and service accounts. This position ensures secure and compliant identity lifecycle management, access provisioning, authentication, authorization, and monitoring for all non-human identities across the enterprise.
You will contribute to technical discussions, collaborate in an agile environment focused on continuous improvement and innovation.
Key Responsibilities
• Design & Architecture: Develop and maintain scalable architectures for non-human identity lifecycle management, including provisioning, rotation, and decommissioning. • Implementation & Automation: Automate identity provisioning and deprovisioning processes for applications, devices, and services using IAM tools and scripts. • Access Management: Define and enforce policies for authentication and authorization of non-human identities, including privileged access management (PAM) for service accounts and secrets management. • Integration: Integrate IAM solutions with cloud platforms, CI/CD pipelines, DevOps tools, and third-party APIs to ensure seamless identity management. • Security & Compliance: Implement security controls, auditing, and monitoring for non-human identities to ensure compliance with regulatory requirements and internal policies. • Incident Response: Investigate and respond to security incidents related to non-human identities, collaborating with cybersecurity and IT teams. • Documentation & Training: Maintain comprehensive documentation and provide training to internal teams on non-human identity best practices.
Required Qualifications
• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience) • 14+ years of experience in identity and access management (IAM), with a focus on non-human identities (applications, APIs, devices, bots) • Strong understanding of authentication protocols (OAuth2, SAML, OpenID Connect), certificate management, and secrets management • Experience with IAM tools (e.g., Azure AD, AWS IAM, HashiCorp Vault, CyberArk, OASIS, SailPoint) • Exposure to IAM concepts: IGA, PAM, RBAC/ABAC, MFA, directory services • Proficiency in scripting or programming languages (Python, PowerShell, Bash, etc.) for automation • Familiarity with cloud environments (AWS, Azure, GCP), IAM of SAAS products (ServiceNow, Snowflake, Oracle Financials etc) and DevOps toolchains
Preferred Skills
• Experience with zero trust architectures and least-privilege access models
• Experience with zero trust architectures and least-privilege access models • Knowledge of regulatory and compliance frameworks (e.g., NIST, ISO, SOC2) • Strong troubleshooting and analytical skills • Excellent communication and documentation abilities
Key Success Factors
• Ability to balance security with usability and operational efficiency • Proactive approach to emerging threats and evolving best practices in identity security • Team player with a collaborative, problem-solving mindset
#Cybersecurity
Weekly Hours: 40 Time Type: Regular Location: IND:AP:Hyderabad / Argus Bldg 4f & 5f, Sattva, Knowledge City- Adm: Argus Building, Sattva, Knowledge City, IND:KA:Banglaore / Intl Tech Park, Whitefield Rd - Storage: Creator Building, Itpb, Whitefield Rd (inactive) It is the policy of AT&T to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, AT&T will provide reasonable accommodations for qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made.