Cyber DT&P - IAM Non Human Identity Specialist - Consultant
Deloitte
Multiple Locationsonsiteseniorfull time2w ago
Deloitte
As an NHI Specialist, you will help organizations strengthen identity security for machines, services, applications, and AI agents across complex enterprise environments. In this role, you will design and implement controls for secrets, certificates, service accounts, and workload identities, applying the same governance and rigor used for human identities. The role combines privileged access management, cloud identity, and automation to reduce risk and improve resilience across modern platforms.
Work you'll do
As an NHI Specialist on the Cyber & Strategic Risk team, you will be responsible for:
Establishing continuous discovery processes for non-human identities, including service accounts, application credentials, tokens, certificates, and secrets across cloud, on-premises, CI/CD, and software-as-a-service environments
Designing and managing secrets management, certificate lifecycle, and workload identity solutions using platforms such as CyberArk Conjur, HashiCorp Vault, Azure Key Vault, Amazon Web Services (AWS) Secrets Manager, and cloud-native identity capabilities
Architecting and enforcing identity and privileged access controls for service accounts, applications, automation identities, and AI agents, including least-privilege access, just-in-time access, ephemeral credentials, and auditability
Developing automation using PowerShell, Python, Terraform, and application programming interfaces (APIs) to support provisioning, credential rotation, compliance reporting, and platform integrations
Conducting risk assessments, driving remediation of non-human identity findings, onboarding platforms into governance frameworks, and documenting standards, architecture, and runbooks in collaboration with security, platform, and application teams
The team
Cyber & Strategic Risk
The cyber risk services—IAM practice helps organizations in designing, developing, and implementing industry-leading IAM solutions to protect their information and confidential data, as well as help them build their businesses and supporting technologies to be more secure, vigilant, and resilient. The cyber risk services—IAM team delivers service to clients through following key areas of IAM:
Application Onboarding
Lifecycle Manager
Compliance Manager
Password Management
Automated Provisioning
Roles Management
ITSM tools Integration
Advanced Authentication Methods
Strategy and Road Map
Location: HYD/BLR/CHN/PUN
Shift Timings: General
Qualifications
Required:
Bachelor’s degree in Computer Science, Information Security, or a related field
Experience with secrets management platforms, including CyberArk Conjur, HashiCorp Vault, Azure Key Vault, Amazon Web Services (AWS) Secrets Manager, or comparable cloud-native solutions
Experience with Identity and Access Management (IAM) and Privileged Access Management (PAM), including roles, policies, entitlements, and least-privilege enforcement
Experience implementing just-in-time access and ephemeral credential or session models
Experience building non-human identity governance programs, including inventory, risk scoring, remediation, and credential lifecycle management
Experience with public key infrastructure, certificate lifecycle management, and cloud IAM in AWS, Azure, or Google Cloud Platform (GCP)
Experience with OAuth 2.0, OpenID Connect, JSON Web Token (JWT)-based authentication, workload identity concepts, and automation using PowerShell, Python, APIs, or software development kits (SDKs)
Preferred:
Experience with non-human identity discovery tooling, including Token, Astrix, Oasis, or Clutch
Experience securing AI agent or agentic workflows, including scoped credential issuance and runtime access control
Experience with Kubernetes secrets, service mesh identity, or SPIFFE/SPIRE
Experience with DevSecOps, CI/CD pipeline security, or secret scanning tools
Experience with non-human identity platforms or dashboards, including Entro, Astrix, Oasis, or Clutch
CyberArk Certified Delivery Engineer (CDE), HashiCorp Vault Associate, AWS Security, or Azure Security certifications
#Cyber_Digital Trust & Privacy
#CA-TD
Ready to apply?
Sign up first — takes a minute — and you get Hiro’s take on this role, a resume tailored to it, and (if available) a referral from a real employee at Deloitte. All free with your Pro gift.
Sign up to apply