[Hiring] IAM AI Engineer @Gallagher

Role Description

The Identity and Access Management AI Engineer is responsible for designing, engineering, and operationalizing AI-enabled identity security capabilities across the enterprise. This role combines deep IAM engineering expertise with artificial intelligence, machine learning, automation, and analytics to strengthen identity controls, reduce access risk, improve operational efficiency, and detect emerging identity-based threats.

The engineer will help modernize identity services by applying AI to:

• Access governance
• Privileged access
• Authentication risk
• Identity lifecycle management
• Entitlement analysis
• Anomaly detection
• Automated decision support

This position partners closely with IAM, the Corporate AI Team, cyber defense, security architecture, infrastructure, cloud, data science, risk, compliance, and application teams to deliver secure, scalable, and compliant identity solutions.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, information technology, data science, engineering, or a related field, or equivalent practical experience.
• Five or more years of experience in identity and access management, cybersecurity engineering, security architecture, cloud security, or related technology roles.
• Hands-on experience with IAM platforms, identity governance, access management, privileged access management, directory services, SSO, MFA, federation, and lifecycle management.
• Practical experience applying automation, analytics, AI, machine learning, or data science techniques to security, risk, identity, or operational use cases.
• Strong understanding of authentication and authorization protocols such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos, and modern API security patterns.
• Experience with scripting or software development using Python, PowerShell, JavaScript, Java, C#, Go, or similar languages.
• Knowledge of cloud identity and security services across Microsoft Azure, AWS, or Google Cloud Platform.
• Experience working with structured and unstructured data, query languages, data pipelines, log analytics, and visualization tools.
• Strong analytical, troubleshooting, communication, and stakeholder management skills.

Requirements

• Experience with Microsoft Entra ID, Entra ID Governance, Entra Permissions Management, Microsoft Defender, Sentinel, Purview, Azure Key Vault, or related Microsoft security capabilities.
• Experience with IGA, PAM, and access management platforms such as SailPoint, Saviynt, CyberArk, One Identity, Okta, Ping Identity, ForgeRock, or similar technologies.
• Experience with AI or ML frameworks, large language model platforms, vector databases, graph analytics, feature engineering, model evaluation, or MLOps and LLMOps practices.
• Familiarity with identity threat detection and response, user and entity behavior analytics, security orchestration, SIEM, SOAR, and threat hunting.
• Knowledge of responsible AI, model risk management, privacy engineering, data protection, and AI governance frameworks.
• Experience supporting regulated environments such as financial services, insurance, healthcare, government, or other compliance-driven industries.
• Professional certifications such as CISSP, CISM, CCSP, Microsoft Security certifications, Azure certifications, AWS Security Specialty, GIAC, Certified Identity and Access Manager, or AI/security-related certifications.

Benefits

• Competitive compensation
• Comprehensive benefits programs designed to support your well-being
• Career development opportunities and ongoing learning
• A collaborative, people-first culture with accessible leadership
• The opportunity to do meaningful work with global reach and local impact