IT Security Specialist (Identity & AI)

About the role

HDB is looking for an Identity & AI Security Specialist to strengthen its identity security capabilities and enable the secure adoption of Generative AI and agentic AI. Working with system owners, architects, operations teams, governance functions and partners, you will design, implement, administer and operate security controls and infrastructure for human identities, privileged accounts, service and workload identities, application credentials and AI agents across on-premises, cloud and AI-enabled environments.

Key responsibilities

• Review and improve policies, standards, reference architectures and control requirements in line with the threat landscape, regulatory obligations and industry practice.
• Identify gaps affecting human, privileged, machine and AI identities, run security risk assessments and recommend remediation.
• Design and implement IAM, IGA, PAM, PIM, MFA, SSO, Conditional Access, RBAC, just-in-time access and access governance across hybrid environments.
• Control the identity lifecycle: privileged accounts, service accounts, application identities, API credentials, workload identities and AI agents, including discovery, onboarding, recertification, rotation and decommissioning.
• Review Generative AI and agentic AI solutions and define controls for agent authentication and authorisation, tool and data access, secrets, prompt injection, data leakage, logging and auditability.
• Administer and maintain identity and AI security platforms, monitor health and performance, patch, upgrade, harden, back up and recover, and troubleshoot issues.
• Turn requirements into solution designs, coordinate configuration, integration, testing, deployment and handover, and manage upgrades and capacity.
• Build scripts, API integrations and workflows to automate discovery, provisioning, access reviews, credential management, monitoring and remediation.
• Investigate alerts, service disruptions and security incidents, perform root-cause analysis and implement recovery and containment.
• Maintain technical documentation and control evidence, support audits, and report risks and control effectiveness to stakeholders.

Required profile

• Degree in cybersecurity, computer science, information systems, engineering or a related discipline, or equivalent professional experience.
• At least 3 years of experience in identity security, cybersecurity engineering, infrastructure operations or security architecture, including hands-on work with enterprise identity and AI security platforms.
• Practical knowledge of enterprise infrastructure operations, including Windows Server or Linux administration, monitoring, hardening, patching, backup and recovery, high availability, capacity management and change management.
• Understanding of identity lifecycle management, authentication, authorisation, Zero Trust, least privilege, segregation of duties, privileged access, access reviews and identity-related threats.
• Ability to work with system owners, architects, auditors and vendors and to communicate technical risks clearly.

Required skills

• Working knowledge of Active Directory or Microsoft Entra ID, SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos, federation and REST APIs.
• Good to have: identity governance, privileged access and secrets-management platforms, cloud IAM, CIEM, identity threat detection and response, and security architecture reviews or threat modelling for AI.
• PowerShell, Python or similar for automation; infrastructure as code or DevSecOps exposure is an advantage.
• Certifications such as CISSP, CISM or CCSP are an advantage.