Identity and Access Management Engineer - AI

Job Description

Identity and Access Management Engineer - AI:
On behalf of our AI Platform Security client, Procom is searching for an Identity and Access Management Engineer - AI for a 6 month contract role. This position is a hybrid position with 2 days onsite at our client’s Toronto office.

Identity and Access Management Engineer - AI - Job Description:
In this role, you will focus on designing, implementing, and operating identity and access management controls specifically for AI workloads. The project involves building a security capability that treats AI identity with the same rigor applied to privileged human accounts, addressing the unique demands of agentic AI systems.

Identity and Access Management Engineer - AI - Responsibilities:
• Design and implement onboarding, tracking, and offboarding processes for AI agent identities
• Map human-to-agent permission delegation chains to maintain accountability
• Build lifecycle governance for machine identities in AI pipelines
• Define and enforce least-privilege access models for AI components
• Configure and maintain Microsoft Entra ID for AI workload identities
• Integrate IAM controls with Microsoft Purview and Sentinel
• Implement RBAC and ABAC models across multi-cloud environments
• Collaborate with integration engineers for IAM telemetry

Identity and Access Management Engineer - AI - Mandatory Skills:
• 5+ years of hands-on IAM engineering experience in enterprise environments
• Deep proficiency with Microsoft Entra ID (Azure AD)
• Experience implementing RBAC/ABAC models across cloud platforms
• Ability to design lifecycle management processes for non-human identities
• Understanding of identity functions in both traditional and agentic AI architectures

Identity and Access Management Engineer - AI – Nice-to-Have Skills:
• Familiarity with identity patterns in agentic or autonomous AI systems
• Experience integrating IAM telemetry with SIEM platforms
• Understanding of supply chain identity risks
• Exposure to multi-cloud IAM: GCP Workload Identity, AWS IAM Roles
• Comfortable operating in a DevSecOps/agile delivery model

Identity and Access Management Engineer - AI – Assignment Length:
This is a 6 month contract position.

Identity and Access Management Engineer - AI - Start Date:
ASAP.

Identity and Access Management Engineer - AI - Assignment Location:
Toronto, Ontario, Canada. This position is hybrid with 2 days in the office.

This employer uses both human and technology-assisted tools to support candidate screening and assessment. Final hiring decisions are made by people.