<div><b>Position Purpose:</b><br/><br/>The Senior Cybersecurity Engineer - Non-Human Identity (NHI) partners with Architecture, IAM, cloud, platform, DevOps, and application teams to design, build, and operate enterprise-scale discovery, governance, and lifecycle automation for non-human identities (NHIs). NHIs include service accounts, API tokens, cloud IAM roles, automation identities, CI/CD identities, and AI agents across on-premises, hybrid, and multi-cloud environments. This role focuses on automation, collaboration, and risk reduction, helping modernize authentication patterns and reduce reliance on long-lived credentials.<br/><br/><b>Preferred Qualifications:</b><br/><br/><b>Non-Human Identity Discovery & Automation</b><br/><ul><li>Work with IAM, Architecture, and platform teams to design and operate automated discovery capabilities for NHIs across servers, applications, cloud platforms, and CI/CD pipelines</li><li>Contribute to development of automation and tooling (Python, PowerShell) to:<ul><li>Discover NHIs across infrastructure and environments</li><li>Parse configuration files, logs, APIs, and Infrastructure-as-Code to identify embedded or hard-coded credentials</li><li>Enrich NHI metadata including ownership, purpose, environment, and lifecycle state</li></ul></li><li>Partner with engineering teams to automate NHI hygiene activities such as ownership validation, lifecycle tracking, and reporting</li></ul><br/><br/><b>NHI Lifecycle & Governance</b><br/><ul><li>Collaborate with IAM, Architecture, cloud, and ITSM teams to design and integrate NHI lifecycle workflows, including onboarding, access reviews, credential rotation, and decommissioning</li><li>Integrate NHI workflows with enterprise platforms, including: IAM and PAM solutions, Cloud IAM services, Secrets management platforms, ITSM and workflow tools</li><li>Support enforcement of clear ownership, purpose, and lifecycle accountability for NHIs</li><li>Assist with enterprise access reviews, attestations, and audit evidence generation</li></ul><br/><br/><b>Partner with application, platform, and DevOps teams</b> to analyze authentication flows and refactor legacy patterns toward modern, password-less NHI designs, including managed identities, OAuth client credentials, and short-lived tokens.<br/><ul><li>Provide NHI context to security monitoring and incident response teams to support investigations involving service account misuse, anomalous automation behavior, or credential compromise</li><li>Apply data-driven techniques such as pattern recognition, baselining, and anomaly indicators to analyze NHI usage trends and detect drift or misuse.</li></ul><br/><br/><b>AI Agent Identity Governance</b><br/><ul><li>Partner with architecture and platform teams to support onboarding and governance of AI agents as non-human identities</li><li>Help ensure AI agents have clearly defined ownership, scoped access, and documented lifecycle expectations</li></ul><br/><br/><b>Basic PKI Responsibilities (Foundational)</b><br/><ul><li>Support certificate-based NHIs (e.g., TLS, mTLS, client authentication) as part of broader NHI governance</li><li>Integrate NHI discovery and lifecycle workflows with enterprise PKI and certificate management platforms</li><li>Ensure certificates and private keys follow approved standards for issuance, rotation, and expiration, without direct ownership of PKI infrastructure</li><li>Collaborate across security, cloud, and platform engineering teams to align NHI controls with Zero Trust principles and THD security standards.</li><li>Produce and maintain technical documentation, runbooks, and onboarding guides, and support audit and compliance activities through NHI evidence and reporting.</li><li>Continuously improve the NHI program by identifying automation opportunities, reducing operational toil, and improving accuracy, coverage, and maturity of non-human identity controls.</li></ul><br/><br/><b>Key Responsibilities:</b><br/><ul><li>100% Deliver Execution, Plans & Align, Problem Solving - Design automation workflows and capabilities in support of data collection, investigation and incident response Develop threat hunting and data analysis strategy and capabilities Identify and propose new technologies, methodologies and/or approaches to detecting malicious activity Utilize indicators to scope and respond proactively to emerging threats Design, build, configure, maintain and monitor cybersecurity threat defense capabilities and user access management</li></ul><br/><br/><b>Direct Manager/Direct Reports:</b><br/><ul><li>This Position typically reports to Manager or Sr. Manager</li><li>This Position has 0 Direct Reports</li></ul><br/><br/><b>Travel Requirements:</b><br/><ul><li>No travel required.</li></ul><br/><br/><b>Physical Requirements:</b><br/><ul><li>Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.</li></ul><br/><br/><b>Working Conditions:</b><br/><ul><li>Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable. </li></ul><br/><br/><b>Minimum Qualifications:</b><br/><ul><li>Must be eighteen years of age or older.</li><li>Must be legally permitted to work in the United States.</li></ul><br/><br/><b>Minimum Education:</b><br/><ul><li>The knowledge, skills and abilities typically acquired through the completion of a high school diploma and/or GED.</li></ul><br/><br/><b>Minimum Years of Work Experience:</b><br/><ul><li>3</li></ul><br/><br/><b>Competencies:</b><br/><ul><li>Action Oriented</li><li>Collaborates</li><li>Communicates Effectively</li><li>Customer Focus</li><li>Drives Results</li></ul><br/><br/><b>For California, Colorado, Connecticut, Rhode Island, Nevada, New York City, Ithaca (NY), Westchester County (NY), and Washington residents:</b><br/><br/>The pay range for this position is between $120,000.00 - $160,000.00</div>