Non Human Identity Specialist

Non-Human Identity (NHI) Specialist

Location: Hyderabad | Pune | Bengaluru | Chennai (Hybrid)

Role summary

Key responsibilities

• Implement and manage secrets management (CyberArk Conjur, HashiCorp Vault, Azure Key Vault, AWS Secrets Manager) with rotation and dynamic secrets
• Enforce least-privilege access for service accounts and automation identities
• Implement JIT and ephemeral credential models
• Manage PKI and certificate lifecycle for machine identities
• Configure Cloud IAM (AWS, Azure, GCP) and workload identity (SPIFFE/SPIRE, federation)
• Implement OAuth 2.0, OIDC, and JWT for service-to-service access
• Discover, inventory, and risk-score non-human identities, and remediate stale or over-privileged ones
• Automate using Python, PowerShell, Terraform, and REST APIs; integrate with SIEM and CI/CD
• Document standards and collaborate with security, platform, and application teams

Required skills

• 4+ years in identity security, PAM, or cloud security
• Bachelors or Masters degree in Computer Science, Information Security, or a related field
• Hands-on with a secrets management platform (Conjur, Vault, or cloud-native)
• Strong IAM/PAM fundamentals and least-privilege enforcement
• Experience with JIT access and ephemeral credentials
• Working knowledge of PKI and Cloud IAM (at least one of AWS, Azure, GCP)
• Solid understanding of OAuth 2.0, OIDC, and JWT
• Familiarity with workload identity concepts
• Scripting in Python, PowerShell, or API/SDK automation
• Strong communication and documentation skills

Preferred skills

• AI agent access control experience
• CyberArk CDE, Vault Associate, or AWS/Azure security certifications
• Kubernetes, service mesh, or SPIFFE/SPIRE
• NHI discovery tools (Astrix, Oasis, Token, Clutch)