[Hiring] Agentic Identity Security Consultant @ManpowerGroup WorkMyWay

Role Description

The Forward Deployed Engineer, Agentic Identity Platform is a hands-on technical role. How much of any given week you spend writing code will vary by engagement, but you'll be expected to understand the systems you work on at implementation depth, and to be able to build in them when the work calls for it.

Enterprises are deploying AI agents faster than anyone has figured out how to secure them. An agent authenticates to twelve systems, spawns subagents, calls tools on behalf of a user who left the company last month and holds credentials nobody inventoried. The identity primitives that industry spent twenty years building for humans and service accounts don't cleanly extend to actors that are autonomous, ephemeral, and delegating authority to each other.

We're building the platforms that solve this:

• Agent registries
• Delegated authorization models
• Runtime attribution
• Policy engines that make decisions in single-digit milliseconds

Some of it ships to Fortune 100 clients. Some of it becomes the reference architecture the industry copies. There's no vendor product to install because in several of these areas the product doesn't exist yet.

You'd be a Forward Deployed Engineer, which means you write the code and you're in the room, possibly virtually, with the client while it runs in their environment.

Specifically:

• Build and ship services in the agentic identity stack: authorization engines, agent registries, credential brokers, and authentication layers for MCP servers
• Own a component end to end: design, implementation, deployment, and what happens when it fails at 3am
• Reverse-engineer how identity actually works in a client environment, then design what it should be
• Prototype against emerging standards and vendor betas, often before documentation exists
• Build the internal tooling and reference implementations the rest of the practice reuses
• Explain your design to a client's engineers and defend the parts they push back on

Most people arrive without the identity background, including people who are strong at all of it now. If you have some of it, tell us. If not, we'll teach you, and you'll learn it faster here than anywhere else because you'll be implementing the specs rather than reading about them.

Travel may be required for this role. The amount of travel will vary from 0 to 100% depending on business need and client requirements.

Qualifications

• Minimum of 3 years of professional experience building and shipping production software
• Hands-on technical work within the last 18 months, counting production development, prototyping, or code review
• Minimum of 2 years of professional development in at least one of Python, Go, Rust, TypeScript, Java, or C++
• Minimum of 2 years building concurrent or distributed systems that ran in production
• Minimum of 2 years of hands-on experience deploying and operating cloud infrastructure on AWS, Azure, or GCP, including containers and CI/CD pipelines
• Bachelor's degree in Computer Science (or equivalent) OR (minimum 12 years) work experience. (If Associate’s Degree, must have minimum 6 years work experience)

Requirements

• At least 1 production service or component you owned end to end, covering design, implementation, deployment, and ongoing operation

Benefits

• Bonus points if you have experience with OAuth 2.0, OIDC, token exchange, SAML, SPIFFE, PKI, or mTLS
• Experience with MCP, agent frameworks, or LLM application development
• Experience in identity and access management, IGA, PAM, secrets management, or non-human identity
• Applied cryptography experience, including enough to know what you don't know
• Participation in a production on-call rotation
• Judgment about which problems call for a library, which call for a vendor product, and which call for writing the thing yourself
• Comfort explaining a design to a client's engineers and defending the parts they push back on