Cyber DT&P - IAM Non Human Identity Specialist - Senior Consultant

Summary

Position Summary

As an NHI Specialist, you will help organizations strengthen identity security for machines, services, applications, and AI agents across complex enterprise environments. In this role, you will design and implement controls for secrets, certificates, service accounts, and workload identities, applying the same governance and rigor used for human identities. The role combines privileged access management, cloud identity, and automation to reduce risk and improve resilience across modern platforms.

Work you'll do

As an NHI Specialist on the Cyber & Strategic Risk team, you will be responsible for:

• Establishing continuous discovery processes for non-human identities, including service accounts, application credentials, tokens, certificates, and secrets across cloud, on-premises, CI/CD, and software-as-a-service environments
• Designing and managing secrets management, certificate lifecycle, and workload identity solutions using platforms such as CyberArk Conjur, HashiCorp Vault, Azure Key Vault, Amazon Web Services (AWS) Secrets Manager, and cloud-native identity capabilities
• Architecting and enforcing identity and privileged access controls for service accounts, applications, automation identities, and AI agents, including least-privilege access, just-in-time access, ephemeral credentials, and auditability
• Developing automation using PowerShell, Python, Terraform, and application programming interfaces (APIs) to support provisioning, credential rotation, compliance reporting, and platform integrations
• Conducting risk assessments, driving remediation of non-human identity findings, onboarding platforms into governance frameworks, and documenting standards, architecture, and runbooks in collaboration with security, platform, and application teams
  
  

The team

Cyber & Strategic Risk

The cyber risk services—IAM practice helps organizations in designing, developing, and implementing industry-leading IAM solutions to protect their information and confidential data, as well as help them build their businesses and supporting technologies to be more secure, vigilant, and resilient. The cyber risk services—IAM team delivers service to clients through following key areas of IAM:

• Application Onboarding
• Lifecycle Manager
• Compliance Manager
• Password Management
• Automated Provisioning
• Roles Management
• ITSM tools Integration
• Advanced Authentication Methods
• Strategy and Road Map
  
  

Location: HYD/BLR/CHN/PUN

Shift Timings: General

Qualifications

Required:

• Bachelor's degree in Computer Science, Information Security, or a related field
• Experience with secrets management platforms, including CyberArk Conjur, HashiCorp Vault, Azure Key Vault, Amazon Web Services (AWS) Secrets Manager, or comparable cloud-native solutions
• Experience with Identity and Access Management (IAM) and Privileged Access Management (PAM), including roles, policies, entitlements, and least-privilege enforcement
• Experience implementing just-in-time access and ephemeral credential or session models
• Experience building non-human identity governance programs, including inventory, risk scoring, remediation, and credential lifecycle management
• Experience with public key infrastructure, certificate lifecycle management, and cloud IAM in AWS, Azure, or Google Cloud Platform (GCP)
• Experience with OAuth 2.0, OpenID Connect, JSON Web Token (JWT)-based authentication, workload identity concepts, and automation using PowerShell, Python, APIs, or software development kits (SDKs)
  
  

Preferred:

• Experience with non-human identity discovery tooling, including Token, Astrix, Oasis, or Clutch
• Experience securing AI agent or agentic workflows, including scoped credential issuance and runtime access control
• Experience with Kubernetes secrets, service mesh identity, or SPIFFE/SPIRE
• Experience with DevSecOps, CI/CD pipeline security, or secret scanning tools
• Experience with non-human identity platforms or dashboards, including Entro, Astrix, Oasis, or Clutch
• CyberArk Certified Delivery Engineer (CDE), HashiCorp Vault Associate, AWS Security, or Azure Security certifications
  
  

#Cyber_Digital Trust & Privacy

#CA-TD

Our purpose

Deloitte's purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.

Our people and culture

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas and perspectives, and bring more creativity and innovation to help solve our clients most complex challenges. This makes Deloitte one of the most rewarding places to work.

Professional development

At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India .

Benefits To Help You Thrive

At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you.

Recruiting tips

From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.

Requisition code: 365822