Identity and Access Management Engineer - AI

Job Description

Identity and Access Management Engineer - AI:
On behalf of our AI Platform Security client, Procom is searching for an Identity and Access Management Engineer - AI for a 6 month contract role. This position is a hybrid position with 2 days onsite at our client’s Toronto office.

Identity and Access Management Engineer - AI - Job Description:
As AI systems increasingly involve autonomous agents acting on behalf of humans, identity becomes one of the most critical and least understood attack surfaces. The project focuses on designing, implementing, and operating identity and access management controls specifically for AI workloads, ensuring every actor is tracked, governed, and auditable.

Identity and Access Management Engineer - AI - Responsibilities:
• Design and implement onboarding, tracking, and offboarding processes for AI agent identities
• Map human-to-agent permission delegation chains, ensuring accountability
• Build lifecycle governance for machine identities within AI pipelines
• Define and enforce least-privilege access models for AI components
• Configure and maintain Microsoft Entra ID for AI workload identities
• Integrate IAM controls with Microsoft Purview and Sentinel
• Implement RBAC and ABAC models across multi-cloud environments
• Participate in agile ceremonies and document IAM architectures

Identity and Access Management Engineer - AI - Mandatory Skills:
• 5+ years of hands-on IAM engineering experience in enterprise environments
• Deep proficiency with Microsoft Entra ID (Azure AD)
• Experience implementing RBAC/ABAC models across cloud platforms
• Ability to design lifecycle management processes for non-human identities
• Strong communication and teamwork skills
• Problem-solving abilities

Identity and Access Management Engineer - AI – Nice-to-Have Skills:
• Familiarity with identity patterns in agentic or autonomous AI systems
• Experience integrating IAM telemetry with SIEM platforms
• Understanding of supply chain identity risks
• Exposure to multi-cloud IAM
• Comfortable operating in a DevSecOps/agile delivery model

Identity and Access Management Engineer - AI – Assignment Length:
This is a 6 month contract position.

Identity and Access Management Engineer - AI - Start Date:
ASAP.

Identity and Access Management Engineer - AI - Assignment Location:
Toronto, Ontario, Canada. Hybrid position with 2 days in office.

This employer uses both human and technology-assisted tools to support candidate screening and assessment. Final hiring decisions are made by people.