Non-Human Identity Architect - PAM and AuthN

This job posting is anticipated to remain open for 30 days, from 24-Sep-2026. The posting may close early due to the volume of applicants.

Team Overview
The Non-Human Identity Architect serves as a technical leader responsible for defining, designing, implementing, and governing enterprise identity security solutions across Authentication (AuthN), Privileged Access Management (PAM), Non-Human Identity (NHI), and AI Security domains. This role partners with engineering, architecture, cybersecurity, infrastructure, cloud, application, and business teams to establish future-state identity security capabilities, reduce organizational risk, and support business transformation initiatives.

What You'll Do:

• Establish an enterprise NHI governance program.

• Develop AI identity security standards and controls.

• Reduce organizational risk associated with machine and privileged identities.

• Modernize identity security capabilities through adoption of industry standards, passwordless authentication, workload identity federation, credential-less architectures, ephemeral access models, modern trust frameworks, and cloud-native identity patterns

• Deliver target-state identity security architecture for cloud, AI, and automation platforms.

• Improve compliance, audit readiness, and operational maturity across AuthN and PAM programs.

• Serve as the teams lead technical authority and partner with Enterprise Architecture for emerging identity security domains, including NHI, Machine Identity Security, and AI Security.

• Develop and maintain enterprise NHI strategy for PAM and AuthN teams in partnership with IGA, Infrastructure, Cloud, Cybersecurity, Application, and Enterprise Architecture teams.

• Establish governance and lifecycle management processes for:

• Service Accounts

• Application Accounts

• API Identities

• Service Principals

• Managed Identities

• Certificates

• Machine Credentials

• Robotic Process Automation (RPA) Identities

• AI Agents

• Agentic Identities

• Delegated Workloads

• Composite Workloads

• Dynamic Client Registrations

• Autonomous Service Identities

• Lead initiatives to improve visibility, ownership, and control of non-human identities across the enterprise.

• Define standards for credential rotation, ownership certification, and audit compliance.

• Establish enterprise NHI inventory and risk-management frameworks, Establish enterprise inventory, governance standards, ownership models, and risk management practices for non-human identities.

  Current Internal home-based associates please note: Even as a hybrid posted role you are eligible to apply and, if selected, you may retain your home-based status. However future business or regulatory needs may require on-site work and some roles may carry a preference for hybrid presence.

What Experience You'll Need:

• 10+ years of experience in Identity and Access Management, Cybersecurity, Infrastructure Engineering, or Enterprise Architecture.

• Deep expertise in:

• Authentication Technologies

• MFA

• Entra ID / Azure AD

• Privileged Access Management

• Cyber Ark

• Hashicorp

• Identity Governance

• Secrets Management

• Bitwarden

• Ping One AIC

• Powerbroker

• Ping Federate

• Ping Access

 What Could Set You Apart:

• Non-Human Identity (NHI) Governance

• Machine Identity Security

• Cloud Identity Architecture

• AI Security and AI Governance

• Workload Identity Federation

• Zero Trust Architecture

• Dev Sec Ops Security

• Kubernetes and Container Security

• Certificate Lifecycle Management

• Authorization Management

• Policy Decision & Enforcement Frameworks

• Policy Orchestration

• Identity Threat Detection & Response (ITDR)

• Identity Security Posture Management (ISPM)

• Hybrid Identity Resilience

• Ephemeral Credential Management

• Experience designing and implementing enterprise-scale Identity Security Architectures, including Authentication, PAM, Non-Human Identity, Secrets Management, Credential Management, Workload Identity, PKI, Certificate Management, SPIFFE/SPIRE-based identity patterns, and AI/Agentic identity security architectures and partnering with enterprise-scale security architects.

• Experience leading cross-functional initiatives and influencing technical direction across organizations.

Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday.\

Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law.

Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page.