Non-Human Identity (NHI) Specialist

Location: Hyderabad | Pune | Bengaluru | Chennai (Hybrid)
Experience: 4+ years | Shift: 1:00 PM to 10:00 PM

Role summary
Secure and govern non-human identities such as service accounts, API keys, certificates, workloads, and AI agents, using PAM and cloud-native identity security practices.

Key responsibilities
Implement and manage secrets management (CyberArk Conjur, HashiCorp Vault, Azure Key Vault, AWS Secrets Manager) with rotation and agile secrets
Enforce least-privilege access for service accounts and automation identities
Implement JIT and ephemeral credential models
Manage PKI and certificate lifecycle for machine identities
Configure Cloud IAM (AWS, Azure, GCP) and workload identity (SPIFFE/SPIRE, federation)
Implement OAuth 2.0, OIDC, and JWT for service-to-service access
Discover, inventory, and risk-score non-human identities, and remediate stale or over-privileged ones
Automate using Python, PowerShell, Terraform, and REST APIs; integrate with SIEM and CI/CD




Document standards and collaborate with security, platform, and application teams

Required skills
4+ years in identity security, PAM, or cloud security
Bachelors or Masters degree in Computer Science, Information Security, or a related field
Hands-on with a secrets management platform (Conjur, Vault, or cloud-native)
Solid IAM/PAM fundamentals and least-privilege enforcement
Experience with JIT access and ephemeral credentials
Working knowledge of PKI and Cloud IAM (at least one of AWS, Azure, GCP)
Solid understanding of OAuth 2.0, OIDC, and JWT
Familiarity with workload identity concepts
Scripting in Python, PowerShell, or API/SDK automation
Robust communication and documentation skills

Preferred skills
AI agent access control experience
CyberArk CDE, Vault Associate, or AWS/Azure security certifications
Kubernetes, service mesh, or SPIFFE/SPIRE
NHI discovery tools (Astrix, Oasis, Token, Clutch)

📌 Non Human Identity Specialist Hyderabad (India)
🏢 Allegis Group
📍 India