Technical Lead, Identity & Access Management

About the role

Applied Intuition is seeking a hands‑on Technical Lead to own the end‑to‑end identity landscape, from foundational IDP architecture to privileged access, secrets management, and access governance for AI agents. This senior individual contributor role drives strategy, implementation, and operational excellence across identity engineering, security, and compliance.

Key responsibilities

• Define long‑term IAM strategy, roadmap, and operating model for the enterprise and product ecosystem.
• Assess and mature current Identity Provider (IDP) architecture, closing gaps and delivering a resilient, scalable design.
• Drive all identity systems toward Zero Trust principles, ensuring security, scalability, and frictionless access.
• Automate the full identity lifecycle beyond traditional joiner‑mover‑leaver processes.
• Implement and enforce RBAC for both human and non‑human identities at scale.
• Define and operationalize least‑privilege policies across all systems and environments.
• Centralize secrets management (keys, tokens, certificates) across cloud and enterprise environments.
• Design and deliver Privileged Access Management (PAM) for admin accounts in IT and cloud engineering.
• Establish a scalable access model for AI agents and bots.
• Collaborate with IT applications and infrastructure teams to enforce SSO enterprise‑wide.
• Own implementation and governance of authentication protocols (SAML, OIDC, OAuth 2.0).

Required profile

• Senior‑level professional with extensive hands‑on experience in identity and access management.
• Proven ability to set direction, drive implementation, and act as the primary identity expert across an organization.
• Strong understanding of Zero Trust, RBAC, least‑privilege, and secrets management concepts.

Required skills

• Identity Provider (IDP) architecture
• Zero Trust principles
• Role‑Based Access Control (RBAC)
• Least‑privilege policy design
• Secrets management (keys, tokens, certificates)
• Privileged Access Management (PAM)
• AI agent and bot access management
• Single Sign‑On (SSO) implementation
• Authentication protocols: SAML, OIDC, OAuth 2.0