Identity AI Security Architect
WiproJob Title: Identity AI Security Architect City: Irving State/Province: Texas Posting Start Date: 10/21/26 Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients’ most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, and operations, we help clients realize their boldest ambitions and build future-ready, sustainable businesses. With over 230,000 employees and business partners across 65 countries, we deliver on the promise of helping our customers, colleagues, and communities thrive in an ever-changing world. For additional information, visit us at www.wipro.com. Title: Indentity AI Security Architect Location: Remote Duration: Full Time Identity: NHI & AI security Reference architecture for AI agent identity: registration, attestation, credential issuance, scoping, revocation Delegation and on-behalf-of patterns — token exchange, audience restriction, downscoping across multi-agent call chains Tool/function invocation authorization: per-tool entitlement, policy enforcement at the agent or LLM gateway, approval gates for high-consequence actions MCP and tool-protocol security — server trust, tool-definition integrity, confused-deputy prevention Containment patterns that assume the reasoning layer is compromised and enforce least privilege at the identity layer Workload identity to replace long-lived secrets: SPIFFE/SPIRE, cloud workload identity federation, mTLS, short-lived credentials NHI discovery, ownership, recertification, and deprovisioning integrated into existing IGA Behavioral telemetry for agent and workload identity misuse; threat models via MITRE ATLAS and OWASP LLM Top 10 Enterprise architecture Security reference architecture, patterns, standards, exception governance Zero trust across identity, device, network, app, data IAM/IGA/PAM, multi-cloud security, DevSecOps and supply chain, cryptography and key management Executive and audit advisory; mentorship of senior architects Required 12+ years security, 5+ in senior/principal architecture at enterprise scale Deep identity architecture ownership across workforce, privileged, and machine identity Command of OAuth 2.0/2.1, OIDC, JWT, RFC 8693 token exchange, mTLS, ABAC/ReBAC, policy-as-code Hands-on securing production AI or agentic systems Secrets management and workload identity platforms; cloud security depth in two or more providers Codes well enough to prototype and review application code in design sessions Preferred Production MCP servers, agent frameworks, or LLM gateways IETF WIMSE and emerging machine identity standards NHI security tooling; machine identity in SailPoint/Saviynt Regulated industry experience (FedRAMP, DFARS/CMMC, PCI DSS, NERC CIP) ͏ Do 1. Design and develop enterprise cyber security strategy and architecture a. Understand security requirements by evaluating business strategies and conducting system security vulnerability and risk analyses b. Identify risks associated with business processes, operations, information security programs and technology projects c. Identify and communicate current and emerging security threats and design security architecture elements to mitigate threats as they emerge d. Identify security design gaps in existing and proposed architectures and recommend changes or enhancements e. Provide product best fit analysis to ensure end to end security covering different faucets of architecture e.g. Layered security, Zoning, Integration aspects, API, Endpoint security, Data security, Compliance and regulations f. Demonstrate experience in doing security assessment against NIST Frameworks, SANS, CIS, etc. g. Provide support during technical deployment, configuration, integration and administration of security technologies h. Demonstrate experience around ITIL or Key process-oriented domains like incident management, co…