CrawlJobs Logo
I
Intellias · IT - Software Development

Senior Agentic Identity & Access Security Engineer

Poland; Spain; United Kingdom · Job Posted June 30, 2026
Apply Position
Job Link Share

Job Description

Our client is a leading global investment management company headquartered in London. It manages over $228 billion in assets and serves institutional investors, pension funds, wealth managers, and other sophisticated clients worldwide. The firm specializes in quantitative investing, alternative investments, systematic trading strategies, and technology-driven asset management. Data science, machine learning, and AI are core components of its investment and research processes. As part of our collaboration we will focus on two foundational capabilities required to enable safe and scalable AI adoption across the enterprise: Agentic Security and AI-Ready Data Foundations.

Job Responsibility

  • Design and ship IaC-driven, self-service identity patterns
  • Define the currently undefined agentic runtime security model
  • Lead the transition from long-lived secrets toward ephemeral, time-based, risk-scored credentials
  • Layer LLM / software guardrails on top of hard guardrails
  • Establish an opinionated onboarding standard
  • Design SIEM integration, behavioural baselining, and anomaly detection for agentic workflows
  • Take bounded beachheads from vague to delivered

Requirements

  • 6+ years in security architecture and/or platform engineering, with a track record of shipping production code
  • Deep, mechanical command of modern identity and authorisation: OIDC / OAuth2 / JWT
  • Hands-on HashiCorp Vault experience
  • Keycloak policy modelling
  • Strong Terraform / IaC fluency
  • Working knowledge of the Active Directory + Entra legacy reality

Nice to have

  • Real exposure to agentic / LLM systems
  • Familiarity with MCP as an integration / onboarding standard
  • Experience with just-in-time, task-scoped delegation versus standing access
  • Behavioural baselining / anomaly detection for workloads
  • SIEM integration and action attribution
  • Financial-services audit literacy
  • Consulting or client-facing / pre-sales experience
Intellias - All Job Offers

Looking for more opportunities?

Search for other job offers that match your skills and interests.

Suggested Tags: Frontend Developer Secretary Talent Manager Salesforce Administrator Data Analyst
Similar Jobs for

Senior Agentic Identity & Access Security Engineer

8 matching positions

Senior Agentic Identity & Access Security Engineer

Our client is a leading global investment management company headquartered in Lo...
Location
Location
Poland; Spain; United Kingdom
Salary
Salary:
Not provided
Intellias
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 6+ years in security architecture and/or platform engineering, with a track record of shipping production code. Principal / Staff-level depth, ideally in a high-velocity or quant / financial-services engineering culture
  • Deep, mechanical command of modern identity and authorisation: OIDC / OAuth2 / JWT — token issuance flows, claims design, and delegation / impersonation patterns
  • Hands-on HashiCorp Vault experience, including dynamic / short-lived secrets and the realities of migrating off long-lived tokens without breaking a large application estate at once
  • Keycloak policy modelling, ideally with the Terraform-driven configuration the firm already uses
  • Strong Terraform / IaC fluency — enough to design repeatable, self-service patterns that others adopt, rather than bespoke per-team setups
  • Working knowledge of the Active Directory + Entra legacy reality: nested groups, LDAP-backed role mapping, and the distribution-list-as-permission-group failure mode — able to design around the mess pragmatically
Job Responsibility
Job Responsibility
  • Design and ship IaC-driven, self-service identity patterns that roll out firm-wide without requiring a full Active Directory cleanup first
  • Define the currently undefined agentic runtime security model: containerised code execution, permission delegation to agents, and MCP-based tool access
  • Lead the transition from long-lived secrets toward ephemeral, time-based, risk-scored credentials, scoped to task duration and issued via JWT / OIDC
  • Layer LLM / software guardrails (policy-as-text plus human review) on top of whatever hard guardrails are feasible across the estate
  • Establish an opinionated onboarding standard (e.g. mandatory MCP interfaces) and win adoption through better defaults and developer experience, not mandate alone
  • Design SIEM integration, behavioural baselining, and anomaly detection for agentic workflows, and centralise siloed audit logs to satisfy both security and regulatory requirements
  • Take bounded beachheads (for example, authenticate users and then delegate scoped access to internal systems) from vague to delivered
Read More
Arrow Right

Senior Agentic Identity & Access Security Engineer

Our client is a leading global investment management company headquartered in Lo...
Location
Location
Poland;Spain;United Kingdom
Salary
Salary:
Not provided
Intellias
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 6+ years in security architecture and/or platform engineering, with a track record of shipping production code. Principal / Staff-level depth, ideally in a high-velocity or quant / financial-services engineering culture
  • Deep, mechanical command of modern identity and authorisation: OIDC / OAuth2 / JWT — token issuance flows, claims design, and delegation / impersonation patterns
  • Hands-on HashiCorp Vault experience, including dynamic / short-lived secrets and the realities of migrating off long-lived tokens without breaking a large application estate at once
  • Keycloak policy modelling, ideally with the Terraform-driven configuration the firm already uses
  • Strong Terraform / IaC fluency — enough to design repeatable, self-service patterns that others adopt, rather than bespoke per-team setups
  • Working knowledge of the Active Directory + Entra legacy reality: nested groups, LDAP-backed role mapping, and the distribution-list-as-permission-group failure mode — able to design around the mess pragmatically
Job Responsibility
Job Responsibility
  • Design and ship IaC-driven, self-service identity patterns that roll out firm-wide without requiring a full Active Directory cleanup first
  • Define the currently undefined agentic runtime security model: containerised code execution, permission delegation to agents, and MCP-based tool access
  • Lead the transition from long-lived secrets toward ephemeral, time-based, risk-scored credentials, scoped to task duration and issued via JWT / OIDC
  • Layer LLM / software guardrails (policy-as-text plus human review) on top of whatever hard guardrails are feasible across the estate
  • Establish an opinionated onboarding standard (e.g. mandatory MCP interfaces) and win adoption through better defaults and developer experience, not mandate alone
  • Design SIEM integration, behavioural baselining, and anomaly detection for agentic workflows, and centralise siloed audit logs to satisfy both security and regulatory requirements
  • Take bounded beachheads (for example, authenticate users and then delegate scoped access to internal systems) from vague to delivered
Read More
Arrow Right

Senior Agentic Identity & Access Security Engineer

Our client is a leading global investment management company headquartered in Lo...
Location
Location
Poland; Spain; United Kingdom
Salary
Salary:
Not provided
Intellias
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 6+ years in security architecture and/or platform engineering, with a track record of shipping production code
  • Principal / Staff-level depth, ideally in a high-velocity or quant / financial-services engineering culture
  • Deep, mechanical command of modern identity and authorisation: OIDC / OAuth2 / JWT — token issuance flows, claims design, and delegation / impersonation patterns
  • Hands-on HashiCorp Vault experience, including dynamic / short-lived secrets and the realities of migrating off long-lived tokens without breaking a large application estate at once
  • Keycloak policy modelling, ideally with the Terraform-driven configuration the firm already uses
  • Strong Terraform / IaC fluency — enough to design repeatable, self-service patterns that others adopt, rather than bespoke per-team setups
  • Working knowledge of the Active Directory + Entra legacy reality: nested groups, LDAP-backed role mapping, and the distribution-list-as-permission-group failure mode — able to design around the mess pragmatically
Job Responsibility
Job Responsibility
  • Design and ship IaC-driven, self-service identity patterns that roll out firm-wide without requiring a full Active Directory cleanup first
  • Define the currently undefined agentic runtime security model: containerised code execution, permission delegation to agents, and MCP-based tool access
  • Lead the transition from long-lived secrets toward ephemeral, time-based, risk-scored credentials, scoped to task duration and issued via JWT / OIDC
  • Layer LLM / software guardrails (policy-as-text plus human review) on top of whatever hard guardrails are feasible across the estate
  • Establish an opinionated onboarding standard (e.g. mandatory MCP interfaces) and win adoption through better defaults and developer experience, not mandate alone
  • Design SIEM integration, behavioural baselining, and anomaly detection for agentic workflows, and centralise siloed audit logs to satisfy both security and regulatory requirements
  • Take bounded beachheads (for example, authenticate users and then delegate scoped access to internal systems) from vague to delivered
  • Fulltime
Read More
Arrow Right

Senior Identity Access Management Engineer

Roku is seeking a senior-level Identity Engineer to enhance its Zero-Trust archi...
Location
Location
United States , New York
Salary
Salary:
158000.00 - 279000.00 USD / Year
roku.com Logo
Roku
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 8+ years of hands-on experience with identity and access management and automating cloud technologies, particularly within the Microsoft ecosystem
  • Strong analytical skills and attention to detail, with the ability to troubleshoot complex infrastructure and identity-related issues
  • Excellent communication skills, with the ability to clearly explain technical concepts to both technical and non-technical stakeholders
  • Deep experience with Microsoft Entra ID, including Conditional Access, Identity Governance, and Privileged Identity Management
  • Familiarity with Microsoft 365 services: Exchange Online, Defender, Purview, Sentinel, Intune, and related platforms
  • Automation and scripting skills using PowerShell, Azure CLI, and Microsoft Graph API
  • working knowledge of Azure services such as Function Apps and Logic Apps
  • Experience in onboarding and managing enterprise applications in Azure Entra ID
  • Advanced knowledge of Azure Single Sign-On (SSO) login methods, including OAuth2, OpenID Connect, and SAML, and their integration with enterprise applications
  • Knowledge of privileged access tools (Azure PIM, CyberArk, etc), secrets management (HashiCorp or Azure Key Vault), and workload identity patterns SPIFEE & SPIRE
Job Responsibility
Job Responsibility
  • Lead enterprise-wide IAM standardization, including identity lifecycle, access governance, and policy enforcement across global regions
  • Drive automation across IAM to streamline administration and deliver a smoother user experience
  • Support enterprise applications onboarding into Azure Entra ID, including SSO, Conditional Access, and role-based access control (RBAC)
  • Enhance privileged access management and implement scalable monitoring, alerting, and auditability solutions to support a secure, geographically distributed workforce
  • Collaborate with IT, Networking, and Security teams to troubleshoot identity-related issues and support global infrastructure initiatives
  • Advance Zero Trust Identity Fabric principles like continuous verification, least-privilege access, and identity-aware policy enforcement across users, devices, workloads, and non-human identities
  • Build identity automation with a DevOps mindset, writing scripts, developing pipelines, and engineering tooling from scratch rather than just configuring them
What we offer
What we offer
  • health insurance
  • equity awards
  • life insurance
  • disability benefits
  • parental leave
  • wellness benefits
  • paid time off
  • global access to mental health and financial wellness support and resources
  • healthcare (medical, dental, and vision)
  • commuter
  • Fulltime
Read More
Arrow Right

Senior Identity Access Management Engineer

Roku is seeking a senior-level Identity Engineer to enhance its Zero-Trust archi...
Location
Location
United States , Boston
Salary
Salary:
158000.00 - 279000.00 USD / Year
roku.com Logo
Roku
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 8+ years of hands-on experience with identity and access management and automating cloud technologies, particularly within the Microsoft ecosystem.
  • Strong analytical skills and attention to detail, with the ability to troubleshoot complex infrastructure and identity-related issues.
  • Excellent communication skills, with the ability to clearly explain technical concepts to both technical and non-technical stakeholders.
  • Deep experience with Microsoft Entra ID, including Conditional Access, Identity Governance, and Privileged Identity Management.
  • Familiarity with Microsoft 365 services: Exchange Online, Defender, Purview, Sentinel, Intune, and related platforms.
  • Automation and scripting skills using PowerShell, Azure CLI, and Microsoft Graph API
  • working knowledge of Azure services such as Function Apps and Logic Apps.
  • Experience in onboarding and managing enterprise applications in Azure Entra ID.
  • Advanced knowledge of Azure Single Sign-On (SSO) login methods, including OAuth2, OpenID Connect, and SAML, and their integration with enterprise applications.
  • Knowledge of privileged access tools (Azure PIM, CyberArk, etc), secrets management (HashiCorp or Azure Key Vault), and workload identity patterns SPIFEE & SPIRE.
Job Responsibility
Job Responsibility
  • Lead enterprise-wide IAM standardization, including identity lifecycle, access governance, and policy enforcement across global regions.
  • Drive automation across IAM to streamline administration and deliver a smoother user experience.
  • Support enterprise applications onboarding into Azure Entra ID, including SSO, Conditional Access, and role-based access control (RBAC).
  • Enhance privileged access management and implement scalable monitoring, alerting, and auditability solutions to support a secure, geographically distributed workforce.
  • Collaborate with IT, Networking, and Security teams to troubleshoot identity-related issues and support global infrastructure initiatives.
  • Advance Zero Trust Identity Fabric principles like continuous verification, least-privilege access, and identity-aware policy enforcement across users, devices, workloads, and non-human identities.
  • Build identity automation with a DevOps mindset, writing scripts, developing pipelines, and engineering tooling from scratch rather than just configuring them.
What we offer
What we offer
  • Health insurance
  • equity awards
  • life insurance
  • disability benefits
  • parental leave
  • wellness benefits
  • paid time off
  • global access to mental health and financial wellness support and resources
  • healthcare (medical, dental, and vision)
  • life
  • Fulltime
Read More
Arrow Right

Senior Principal TPM - Agentic Identity & Access

Atlassian is a leading provider of collaboration software. Our software products...
Location
Location
United States , Seattle
Salary
Salary:
Not provided
themuse.com Logo
The Muse
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Proven track record leading organization-changing, multi-department technical programs in identity or security domains
  • Deep technical fluency in identity and access management concepts (OAuth, OIDC, SAML, authorization models, consent frameworks) with the ability to engage credibly at architecture-level discussions
  • Demonstrated ability to drive strategy and delivery across multiple engineering teams simultaneously, with competing priorities and without direct authority: influencing through clarity, trust, and frameworks
  • Experience shaping and driving platform adoption programs, not just building infrastructure, but measurably getting product teams to migrate onto prescribed patterns
  • Track record of building executive-ready narratives that drive alignment and unblock decisions at VP+ levels, in written, visual, and verbal formats
  • Experience with competitive market positioning in platform/security spaces and ability to translate external signals into internal strategy adjustments
  • Strong commercial instinct: ability to partner with product and GTM on what to monetize vs. what to include as foundational, and how to sequence accordingly
  • Familiarity with AI agent architectures, MCP (Model Context Protocol), agentic runtime patterns, and enterprise governance frameworks
  • Experience at scale SaaS companies navigating the tension between platform standardization and product-team autonomy
Job Responsibility
Job Responsibility
  • Own and drive the end-to-end program for Agentic Identity & Access across Atlassian, encompassing strategy, roadmap, and accountability mapping
  • Drive clarity across Atlassian on how agents authenticate, are authorized, and are governed when interacting with Atlassian data
  • Drive adoption of the Agentic Identity & Access golden path across all agentic runtimes and product teams
  • Lead cross-functional delivery, ensuring accountability to commitments across multiple departments. Proactively identify and resolve organizational ambiguity around ownership, accountability, and prioritization in a rapidly evolving space. Synthesize complex, multi-team program information into concise, actionable communications
  • Represent Atlassian's point of view on agentic identity and access externally, contributing to industry thought leadership
  • Drive systemic improvements to how Atlassian delivers cross-cutting, multi-org platform programs - codifying patterns, playbooks, and operating rhythms that scale. Mentor and uplift TPMs across the organization and evolve the TPM craft at Atlassian
What we offer
What we offer
  • Health and Wellness
  • Health Insurance
  • Dental Insurance
  • Vision Insurance
  • Life Insurance
  • Short-Term Disability
  • Long-Term Disability
  • FSA
  • HSA With Employer Contribution
  • Fitness Subsidies
Read More
Arrow Right

Senior Software Engineer, Identity Platform

As a Senior Software Engineer on the Identity team, you will build and evolve th...
Location
Location
United States , San Francisco
Salary
Salary:
293000.00 - 405000.00 USD / Year
openai.com Logo
OpenAI
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 7+ years of experience building and shipping production systems at product-driven technology companies
  • track record of owning meaningful technical scope
  • care deeply about reliability, safety, and performance in production environments
  • experience or interest in Authentication, Authorization, Federation, and Identity Management
  • naturally take ownership end-to-end
  • comfortable navigating unfamiliar systems
  • eager to learn whatever's needed to solve hard problems well
  • thrive in fast-moving environments
  • bringing structure to ambiguous problems
  • balancing competing priorities
Job Responsibility
Job Responsibility
  • Architect and build the next generation of Identity at OpenAI – including new use cases such as Agent identity and Sign In With ChatGPT
  • design and build our identity infrastructure for consumer internet scale, while also solving scalability bottlenecks as they arise
  • build powerful identity primitives, APIs, and internal tooling that enable product teams across OpenAI to integrate seamlessly with the account and access-control layer
  • collaborate closely with a broad set of stakeholders, including product, design, go-to-market, and other engineers
  • drive major architectural initiatives
  • mentor other engineers
  • make platform-level decisions where security, correctness, and reliability are paramount
What we offer
What we offer
  • Offers Equity
  • Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts
  • Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit)
  • 401(k) retirement plan with employer match
  • Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birthing parents), plus paid medical and caregiver leave (up to 8 weeks)
  • Paid time off: flexible PTO for exempt employees and up to 15 days annually for non-exempt employees
  • 13+ paid company holidays, and multiple paid coordinated company office closures throughout the year for focus and recharge, plus paid sick or safe time (1 hour per 30 hours worked, or more, as required by applicable state or local law)
  • Mental health and wellness support
  • Employer-paid basic life and disability coverage
  • Annual learning and development stipend to fuel your professional growth
  • Fulltime
Read More
Arrow Right

Senior Enterprise Agentic AI Engineer

Planet DDS is building a centralized intelligence layer focused on transforming ...
Location
Location
United States , Irvine
Salary
Salary:
177000.00 - 221000.00 USD / Year
planetdds.com Logo
Planet DDS
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 5-7 years of experience in software engineering or applied machine learning
  • 2+ years building production deployments of agentic AI systems (tool‑using LLMs or multi‑agent workflows) with measurable business outcomes
  • Demonstrated experience productionizing AI or LLM-based systems
  • Proficiency in Python/TypeScript and building API‑first services with CI/CD
  • Hands-on experience with prompt engineering, evaluation, and optimization
  • Working knowledge of enterprise lakehouse architectures, including Delta Lake, medallion patterns, streaming ingestion, governance (Unity Catalog), and designing data layers that support high‑performance AI/agentic workflows
  • Proven ability to integrate Azure OpenAI or similar LLM platforms into orchestrated workflows
  • Experience designing and orchestrating multi-step, event-driven workflows using modern cloud-native services for serverless execution, workflow orchestration, messaging, and event-driven architecture
  • Experience designing and deploying cloud-native AI workflows in Microsoft Azure
  • Demonstrated ability to implement guardrails, output validation, and human‑in‑the‑loop patterns in production
Job Responsibility
Job Responsibility
  • Design, build, and scale production-grade agentic workflows that observe operational signals, reason across data, and take or recommend actions such as alerts, task creation, and decision support
  • Implement multi‑agent patterns (planner/worker, toolformer, delegate/reviewer) with deterministic and human‑in‑the‑loop controls
  • Architect an agentic intelligence layer atop the enterprise data lakehouse
  • Own the AI execution layer, including prompt architecture, orchestration, evaluation, monitoring, logging, and tool creation including but not limited to MCP
  • Translate business needs and operational challenges into clear technical approaches and delivery plans, resulting in scalable, reusable AI solutions
  • Partner closely with data engineering to define AI-ready schemas and data contracts
  • Instrument workflows with tracing, cost/perf dashboards, evaluation harnesses (automated + human), and drift monitoring
  • Ensure AI systems are secure, governed, auditable, and reliable
  • Drive solutions from concept to production without heavy process or handoffs
What we offer
What we offer
  • Medical, dental and vision insurance
  • Health Savings Account
  • Flexible Spending Accounts
  • Telehealth
  • 401(k) and 401(k) match
  • Life and AD&D insurance
  • Short-Term and Long-Term Disability
  • FTO or Vacation
  • Sick Time
  • Employee Well-Being program
  • Fulltime
Read More
Arrow Right