AI Identity Security Engineer

Help modernize cloud delivery by building secure, automated CI/CD and scaling identity governance for AI agents and non-human identities.

Responsibilities

• Partner with engineers and IT to orchestrate code builds, quality and security analyses, deployments, and automated testing via CI/CD release candidacy pipelines
• Translate business needs into technology solutions and articulate requirements to stakeholders
• Model release candidate CI/CD pipelines to communicate states and steps for release candidate determination per application and service
• Design and develop fully autonomous CI/CD pipelines for cloud deployments with automation across infrastructure, services, and application build and deployment
• Ensure pipeline components follow software engineering practices including automated tests and infrastructure tests
• Research and evaluate new technologies to improve efficiency and effectiveness
• Implement highly scalable CI/CD platforms capable of supporting high change volumes and fast feedback loops
• Automate operational activities and tasks
• Respond to performance issues identified by alerts and incidents tied to CI/CD platforms
• Build tools that reduce errors and improve customer experience
• Support troubleshooting of production issues, and ensure pipelines and infrastructure produce clear documentation and metrics to enable root cause analysis
• Develop and test Ansible Playbooks, Terraform Scripts, and Packer Scripts to establish immutable infrastructure
• Work with Enterprise Architecture, Information Security (InfoSec), Software Delivery, and Quality Assurance to enable organization-wide cloud adoption through complete automation
• Ensure alignment with risk management program requirements, rules and regulations, and cybersecurity practices; support process improvements and apply disciplined change management
• Own lifecycle and access governance foundations for AI agents and non-human identities, anchored in SailPoint and enterprise IAM systems
• Establish and scale access review, certification, and provisioning processes tailored to AI and agentic use cases
• Mature identity governance for NHI, including consistent onboarding, entitlement management, and automated deprovisioning controls
• Coordinate with security, authorization, and platform teams to align lifecycle controls with runtime enforcement and policy decision points
• Drive a roadmap for centralized governance of agent identity, access, and compliance across cloud environments

Requirements

• High School Diploma or GED and eight (8) years of related post-secondary education and/or experience in Information Security or Information Technology
• Ability to interpret and ensure compliance with applicable rules, regulations, and industry guidance
• Excellent communication skills and willingness to mentor developers and other team members in DevSecOps practices
• Excellent knowledge of cloud infrastructure, networking, services, and cloud architectural patterns, including compute (virtual machines, managed infrastructure, containers, serverless), database services, security services, and application services
• Proficiency in Python
• Understanding of Shift Left principles and facilitation technologies
• Working knowledge of Jenkins, Azure DevOps, Ansible, Terraform, Packer, Git, and ServiceNow (ServiceNow is a plus)
• Comfort developing pipelines as code using YAML specs and Ansible playbooks
• Ability to ensure compliance with risk management programs, rules and regulations, and cybersecurity practices; supports process improvements; applies disciplined change management

Technologies

• Python
• Jenkins
• Azure DevOps
• Ansible
• Terraform
• Packer
• Git
• ServiceNow
• YAML
• SailPoint
• HashiCorp Vault
• OpenShift
• Azure Kubernetes Service (AKS)
• Blue/Green
• Canary Deployment
• Ansible Playbooks
• Terraform Scripts
• Packer Scripts
• SQL
• Java
• AI/ML systems
• AI agents
• Agentic architectures
• Chaos engineering

Preferred Experience

• Strong background in identity governance automation, IAM, or DevSecOps with hands-on engineering experience, including familiarity with AI/ML systems, agentic architectures, and associated security risks
• Hands-on experience developing and customizing solutions within SailPoint, including writing and maintaining custom code
• Proven experience automating access reviews and certification processes for non-human identities (NHIs)
• Advanced proficiency in SQL and Java, including ability to build, optimize, and troubleshoot complex solutions

Benefits

• Paid Vacation/Sick Time
• 401K with Company Match
• Medical, Dental and Vision Benefits
• Disability Benefits
• Health Savings Account
• Flexible Spending Account
• Life Insurance
• Parental Leave
• Employee Assistance Program
• Associate Volunteer Program

This Position

• Exempt from timekeeping requirements under the Fair Labor Standards Act and not eligible for overtime pay
• Currently offsite, preferably close to a Regions office within the retail branch footprint
• Primarily works from home; may be expected to go on site for meetings or other events as needed
• Location: Hoover, Alabama (Riverchase Operations Center)

Salary

• USD 133,059 - 166,810 per year

Job Application

• Applications accepted electronically through Regions’ career site for at least five business days from the posting date
• Higher-volume positions may remain active longer and may close at any time at the discretion of the company