Senior Security Consultant, NHI (Non-Human Identity)

Location: Remote, U.S.-based only; up to 10% travel may be required.

Company

hirify.global provides cybersecurity expertise, solutions, and services focused on helping organizations evaluate security posture, identify threats, and mitigate risk.

What you will do

• Lead discovery, inventory, classification, ownership, governance, monitoring, and lifecycle management for service accounts, application identities, workload identities, APIs, secrets, tokens, certificates, and other non-human identities.
• Assess and reduce risks involving orphaned, stale, excessive, over-privileged, unmanaged, and exposed credentials.
• Develop risk-scoring and prioritization models based on privileges, exposure, usage, ownership, business criticality, and potential blast radius.
• Define and implement controls based on Zero Trust, least privilege, identity security, and secrets-management principles.
• Integrate NHI security capabilities with IAM, PAM, CIEM, CSPM, SIEM, ITSM, secrets-management, and DevSecOps platforms.
• Collaborate with application, development, DevOps, cloud, infrastructure, security, and compliance teams; develop automation, dashboards, playbooks, and security standards.

Requirements

• At least 5 years of experience in cybersecurity, IAM, PAM, cloud security, application security, or a related discipline.
• At least 2 years of experience with non-human identities, service accounts, application or machine identities, workload identities, or secrets management.
• Hands-on experience with NHI security, identity security, PAM, IAM, or secrets-management platforms; experience across cloud, on-premises, SaaS, application, DevOps, and infrastructure environments.
• Strong understanding of AWS, Azure, and/or GCP identity and access management, DevOps and CI/CD environments, cloud-native credentials, Kubernetes, containers, and credential security.
• Experience with Zero Trust, least privilege, identity relationships, attack paths, excessive privilege, security controls, remediation plans, dashboards, and operational playbooks.
• Strong analytical, documentation, communication, and collaboration skills, including translating technical identity risks into business and security impact.

Nice to have

• Experience with Oasis Security, Clutch Security, Entro, CyberArk, Delinea, BeyondTrust, HashiCorp Vault, or comparable platforms.
• Experience with OAuth 2.0, OpenID Connect, SAML, JWTs, API authentication, PKI, certificates, SSH, and cloud-native identity technologies.
• Scripting and automation experience with Python, PowerShell, REST APIs, or similar technologies.
• Relevant certifications such as CISSP, CCSP, Security+, cloud security, or IAM/PAM certifications.
• Experience with AI agent identities and AI workload security.

Culture & Benefits

• Remote workforce primarily limited to U.S.-based employees.
• Medical, dental, and HSA plan options with employer premium contributions.
• Flexible Time Off program and 12 corporate holidays.
• Mobile phone and home internet allowance.
• Retirement plan eligibility after two months at open enrollment and optional pet benefits.

Hiring process

• Applications are managed through Greenhouse Software.
• HR screening requests may be scheduled through Zoom Scheduler; application updates may require checking the spam folder.