Senior Security Engineer, Identity & Machine Access

Uniphore is the Business AI company. Our sovereign, composable and secure AI platform connects enterprise data, fine-tunes AI models and deploys agentic AI across the enterprise. We empower every worker to boost productivity and help businesses grow faster, operate smarter and reduce costs. Trusted by more than 2,000 businesses globally, and recognized on the Deloitte Fast 500, Uniphore delivers on the promise of AI as a transformative force for business. Job Description:   About The Role We are looking for a Senior Security Engineer to own and mature our identity and access program, with a primary focus on machine and non-human identity. Traditional human IAM is the foundation, but this role exists for what is coming: as we deploy agentic AI, every agent, MCP server, service, workload, and pipeline becomes an identity that must be authenticated, scoped to least privilege, governed, and retired. You will own the credentials, secrets, and privileged access that hold a complex multi-cloud, AI-driven enterprise together, and build the identity fabric that lets us scale agentic systems without expanding our attack surface. This role owns machine, workload, and non-human identity and the credentials behind our platform. This is a hands-on role for an engineer who is passionate about automation, security-as-code, and treating both human and non-human identity as first-class security problems. What You Will Do (Key Responsibilities) Own the non-human identity (NHI) program: inventory, govern, and secure service accounts, workload identities, API keys, tokens, OAuth clients, and certificates used by applications, pipelines, AI agents, and MCP servers. Drive machine access toward least-privilege, short-lived, and fully auditable credentials, and design the model for how non-human identities are issued, scoped, rotated, and revoked at scale. Define and govern the authorization model for AI agent and tool access (including MCP), ensuring agents can reach only what they are explicitly entitled to. Own Privileged Access Management (PAM) across engineering and cloud environments: vaulting, just-in-time access, session control, and the elimination of standing privilege. Own secrets management: centralize and rotate secrets, eliminate hardcoded credentials, and embed secret hygiene into CI/CD and runtime. Own identity governance: periodic access reviews (User Access Reviews), entitlement management, and least-privilege enforcement across human and non-human identities, automating the end-to-end review process. Workforce IdP administration is owned by IT and partner on governance and access policy. Architect least-privilege IAM across our multi-cloud estate (AWS primary), including workload identity and cross-account and cross-provider trust, reducing identity blast radius across our hybrid (AWS and Rackspace) seam. Govern application and agent identity, including Entra app-registration governance and OAuth scope management. Partner with DevOps…