Job Description

The Non-Human Identity Engineer is responsible for the design, implementation, and management of identity and access management (IAM) solutions for non-human entities, including applications, devices, APIs, bots, and service accounts. This position ensures secure and compliant identity lifecycle management, access provisioning, authentication, authorization, and monitoring for all non-human identities across the enterprise.

You will contribute to technical discussions, collaborate in an agile environment focused on continuous improvement and innovation.

Key Responsibilities

• Design & Architecture
  Develop and maintain scalable architectures for non-human identity lifecycle management, including provisioning, rotation, and decommissioning.
• Implementation & Automation
  Automate identity provisioning and deprovisioning processes for applications, devices, and services using IAM tools and scripts.
• Access Management
  Define and enforce policies for authentication and authorization of non-human identities, including privileged access management (PAM) for service accounts and secrets management.
• Integration
  Integrate IAM solutions with cloud platforms, CI/CD pipelines, DevOps tools, and third-party APIs to ensure seamless identity management.
• Security & Compliance
  Implement security controls, auditing, and monitoring for non-human identities to ensure compliance with regulatory requirements and internal policies.
• Incident Response
  Investigate and respond to security incidents related to non-human identities, collaborating with cybersecurity and IT teams.
• Documentation & Training
  Maintain comprehensive documentation and provide training to internal teams on non-human identity best practices.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience)
• 14+ years of experience in identity and access management (IAM), with a focus on non-human identities (applications, APIs, devices, bots)
• Strong understanding of authentication protocols (OAuth2, SAML, OpenID Connect), certificate management, and secrets management
• Experience with IAM tools (e.g., Azure AD, AWS IAM, HashiCorp Vault, CyberArk, OASIS, SailPoint)
• Exposure to IAM concepts: IGA, PAM, RBAC/ABAC, MFA, directory services
• Proficiency in scripting or programming languages (Python, PowerShell, Bash, etc.) for automation
• Familiarity with cloud environments (AWS, Azure, GCP), IAM of SAAS products (ServiceNow, Snowflake, Oracle Financials etc) and DevOps toolchains

Preferred Skills

• Experience with zero trust architectures and least-privilege access models

• Experience with zero trust architectures and least-privilege access models
• Knowledge of regulatory and compliance frameworks (e.g., NIST, ISO, SOC2)
• Strong troubleshooting and analytical skills
• Excellent communication and documentation abilities

Key Success Factors

• Ability to balance security with usability and operational efficiency
• Proactive approach to emerging threats and evolving best practices in identity security
• Team player with a collaborative, problem-solving mindset

#Cybersecurity

Weekly Hours:

40

Time Type:

Regular

Location:

IND:AP:Hyderabad / Argus Bldg 4f & 5f, Sattva, Knowledge City- Adm: Argus Building, Sattva, Knowledge City, IND:KA:Banglaore / Intl Tech Park, Whitefield Rd - Storage: Creator Building, Itpb, Whitefield Rd (inactive)

It is the policy of AT&T to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, AT&T will provide reasonable accommodations for qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made.