Principal Cybersecurity Architect – Identity & Access Management for AI Systems

Job not on LinkedIn

🔥 12 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Switzerland Global Enterprise

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 1927

🤝 B2B

🛍️ eCommerce

B2B • eCommerce • Export

Switzerland Global Enterprise is a national platform that provides support to companies in Switzerland to promote their products and services in international markets. The organization offers various services including market entry advice, networking opportunities, and information on trade regulations, helping Swiss businesses to successfully expand and thrive globally.

📋 Description

• Act as the primary authority on AI identity security, providing guidance to executive leadership and engineering teams • Drive strategy across cybersecurity, cloud platforms, GRC, legal, and business units • Represent the organization in external forums, industry working groups, and vendor discussions regarding AI security standards • Define the long-term IAM architecture for AI systems and agents in cloud and hybrid environments, establishing reusable patterns and reference designs • Oversee the full lifecycle for AI agents, from initial onboarding and cryptographic identity assignment to decommissioning • Maintain an unbroken chain of human ownership and traceability for all autonomous agents • Architect and enforce the Principle of Least Privilege (PoLP), Just-in Time (JIT), and Just-Enough-Access (JEA) patterns for AI workloads • Partner with GRC and privacy teams to ensure AI agent governance meets rigorous regulatory requirements

🎯 Requirements

• 12+ years in cybersecurity, with a heavy emphasis on IAM • 7+ years in Principal/Senior Architect roles for large-scale enterprise or cloud-native environments • Expert-level knowledge of AWS IAM (roles, policies, SCPs, federation) and AWS Identity Center • Proficiency with AWS Bedrock Identity/AgentCore and similar frameworks • Expert understanding of Zero Trust architecture and its application to AI/agentic workloads • Exceptional ability to distill complex technical risks for executive stakeholders • Familiarity with IGA technologies (e.g., Saviyant) and NHI (Non Human Identity) governance • Knowledge of LLM-specific threats (OWASP LLM Top 10) and prompt injection mitigation • Understanding of SPIFFE/SPIRE for workload identity • Certifications: AWS Certified Security – Specialty, CISSP, CISM, or CCSP

🏖️ Benefits

• medical, dental, vision, and prescription drug coverage • access to Health Coach from GE Vernova, a 24/7 nurse-based resource • access to the Employee Assistance Program, providing 24/7 confidential assessment, counseling and referral services • GE Vernova Retirement Savings Plan • tax-advantaged 401(k) savings opportunity with company matching contributions and company retirement contributions • access to Fidelity resources and financial planning consultants • tuition assistance • adoption assistance • paid parental leave • disability benefits • life insurance • 12 paid holidays • permissive time off