[Remote] Sr. Principal IAM Security Engineer

Note: The job is a remote job and is open to candidates in USA. Autodesk is a company that creates innovative solutions across various industries. They are seeking a Sr. Principal IAM Security Engineer to lead the strategy and execution for modern Identity and Access Management, focusing on both human and non-human identities while ensuring secure and scalable identity governance.

Responsibilities

• Define the enterprise and platform IAM strategy for human identities, NHI, and AI/agent identities, including lifecycle, authentication, authorization, and auditing standards
• Establish identity reference architectures, patterns, and paved roads for product teams and internal engineering
• Build and operationalize controls for service identities, workload identities, API identities, bots, and automation accounts across cloud, CI/CD, and runtime environments
• Drive adoption of short-lived, federated credentials where feasible; reduce static secrets and unmanaged service accounts
• Implement lifecycle governance for NHI: creation standards, ownership, rotation/attestation, inactivity reaping, and incident response playbooks
• Define secure patterns for AI acting on behalf of users or services, including delegated authorization, scoped tokens, and least-privilege access models
• Partner with AI platform teams to implement guardrails: identity provenance, policy enforcement, auditing, and kill-switch mechanisms for misbehaving agents
• Ensure AI identity behaviors are measurable and governable (logging, traceability, approvals for sensitive actions, segmentation of duties)
• Embed AI and machine learning capabilities into IAM platforms and security tooling to enable intelligent, automated identity governance — including access decisioning, anomaly detection, and agent behavior monitoring
• Design, build, and deploy purpose-built AI agents and ML-powered security systems that autonomously execute IAM functions — including identity lifecycle management, entitlement reviews, and real-time response to identity-based threats
• Fine-tune and optimize existing AI models against Autodesk-specific identity and access data to improve accuracy of threat detection, behavioral anomaly identification, and access risk scoring within the IAM environment
• Build/standardize authorization models (RBAC/ABAC/ReBAC as appropriate) across workforce and product systems
• Drive consistent policy as code, access reviews, and privileged access workflows
• Define standards for token scopes, claims, session constraints, step-up auth, and sensitive action protections
• Improve detection/response for identity threats: anomalous token use, privilege escalation, credential misuse, service-account sprawl
• Create metrics and reporting for identity posture and platform adoption (coverage, drift, exceptions, time-to-remediate)
• Lead identity-related investigations and post-incident improvements
• Serve as a senior technical leader influencing engineering orgs, platform teams, and security; mentor others and raise the bar on identity engineering
• Translate risk into pragmatic engineering requirements; drive roadmaps across multiple teams

Skills

• 10+ years in IAM / security engineering, including designing identity architectures at enterprise scale
• Proven experience securing non-human identities across cloud, CI/CD, and production runtimes
• Deep knowledge of auth standards: OAuth2, OIDC, SAML, JWT, token exchange, federation, and modern workload identity patterns
• Strong authorization design experience: modeling permissions, least privilege, policy enforcement, and access governance
• Experience designing or securing systems where software agents act on behalf of users/services (delegation, impersonation, tool access, constrained execution)
• Ability to define guardrails for agentic actions: approval gates, scoped permissions, auditable trails, and containment strategies
• Strong software engineering fundamentals (APIs, distributed systems, logging/telemetry); ability to review designs and code
• Experience with cloud IAM ecosystems and platform primitives (identity federation, workload identity, secretless patterns, KMS/HSM integration)
• Experience building identity 'paved roads' and internal developer platforms (IDP) patterns for identity
• Experience with privileged access management and tiering models for admin access
• Familiarity with CI/CD identity, signing, and provenance controls (build identities, artifact trust, token hardening)
• Drives measurable risk reduction and adoption across orgs
• Sets standards others follow; resolves ambiguous identity problems; leads through influence

Benefits

• Annual cash bonuses
• Commissions for sales roles
• Stock grants
• A comprehensive benefits package

Company Overview

Company H1B Sponsorship