[Hiring] Senior Cyber Security Engineer @Newell Brands

Role Description

The Senior Cloud / AI Identity Engineer leads the strategy, design and governance of a rapidly expanding class of non-human identities - AI agents, Model Context Protocol (MCP) servers, service accounts and workload identities across Newell's cloud and hybrid environments. This role defines the program framework, establishes departmental standards and drives execution across multiple engineering and security functions.

As adoption of autonomous agents and AI-driven tooling accelerates, this role shapes and advances the visibility, policy and lifecycle controls needed to keep pace with an environment that changes continuously, contributing to the security department's planning and goal-setting for non-human identity at scale.

The ideal candidate brings experience operating at the intersection of cloud security, identity engineering and emerging AI infrastructure, influences peers and cross-functional partners to align on governance approaches, and drives discovery and remediation as a continuous, programmatic discipline.

Key Responsibilities

• Continuously discover and inventory AI agents, MCP servers and other non-human identities across cloud, SaaS and on-premises environments as they're provisioned, modified or retired.
• Design and enforce governance controls - registration, ownership assignment, least-privilege scoping and credential lifecycle management for non-human identities.
• Build and maintain automated detection for unmanaged or "shadow" AI agents and service identities, closing visibility gaps before risk increases.
• Lead cross-functional alignment with platform, DevOps and AI/ML engineering teams to embed identity governance into agent and MCP server provisioning workflows, influencing teams outside the security organization to adopt consistent practices and standards.
• Define and maintain policies for non-human identity authentication, authorization and session boundaries, aligned to Zero Trust principles.
• Monitor for anomalous behavior, privilege drift and policy violations among AI agents and machine identities, and lead remediation.
• Maintain an accurate, continuously updated risk register and ownership map for all identities in scope.
• Evaluate emerging tools and standards for AI agent identity and MCP governance; lead adoption decisions, build the business case for investment, and drive implementation across impacted teams where adoption strengthens Newell's security posture.
• Develop and present reporting and metrics on non-human identity coverage, risk and remediation to security leadership and cross-functional stakeholders; advise on program priorities and translate findings into actionable recommendations that influence department-level decisions.
• Provide technical mentorship and guidance to junior and mid-level security engineers; may lead significant portions of complex cross-functional initiatives and serve as a subject matter authority for non-human identity across the security organization.

Qualifications

• 5+ years of experience in identity and access management, cloud security or infrastructure security engineering.
• Hands-on experience managing service accounts, workload identities or machine-to-machine authentication in a cloud environment (AWS, Azure or GCP).
• Deep knowledge in AI agent architectures and the Model Context Protocol (MCP), including how agents authenticate and interact with tools and data, with demonstrated ability to translate that knowledge into governance policy and engineering standards.
• Experience with identity governance concepts - access certification, entitlement review, ownership assignment applied to non-human identities.
• Knowledge and experience with modern authentication standards (OAuth 2.0, OIDC, SPIFFE/SPIRE, mTLS) as they apply to machine and workload identity, with experience applying these standards to define enterprise-level policies.
• Strong scripting or automation skills (Python, PowerShell or Terraform) to build discovery and governance tooling at scale.
• Ability to operate independently in ambiguity and define structure where none exists - this space is rapidly evolving, standards are still forming, and the role requires establishing program frameworks, influencing organizational direction and driving adoption across functions.

Preferred Qualifications

• Experience with cloud security posture management (CSPM) or cloud infrastructure entitlement management (CIEM) tools.
• Familiarity with secrets management platforms (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault).
• Exposure to AI/ML platform engineering or LLM application architecture.
• Relevant certifications (AWS/Azure/GCP security specialty, CISSP, or equivalent).

Benefits

• The Remote base pay range for this position is from $136,000 to $187,000. Salary will be based on prior experience related to the skills required for this position.