Job description
Job ID: 18336
Position Title: Senior Cyber Security Engineer, IAM Cloud / AI Identity
Location: Atlanta, GA / Remote
Reports To: Senior manager, IAM
Newell Brands is a leading consumer products company with a portfolio of iconic brands like Graco®, Coleman®, Oster®, Rubbermaid®, Sharpie® and Yankee Candle® - and 24,000 talented teammates around the world. Our culture is built on values in action: Integrity, Teamwork, Passion for Winning, Ownership, and Leadership. We work together to win, grow, and make a real impact—supported by a high-performing, inclusive, and collaborative environment where you can be your best, every day.
Job Summary
The Senior Cloud / AI Identity Engineer leads the strategy, design and governance of a rapidly expanding class of non-human identities - AI agents, Model Context Protocol (MCP) servers, service accounts and workload identities across Newell's cloud and hybrid environments. This role defines the program framework, establishes departmental standards and drives execution across multiple engineering and security functions.
As adoption of autonomous agents and AI-driven tooling accelerates, this role shapes and advances the visibility, policy and lifecycle controls needed to keep pace with an environment that changes continuously, contributing to the security department's planning and goal-setting for non-human identity at scale.
The ideal candidate brings experience operating at the intersection of cloud security, identity engineering and emerging AI infrastructure, influences peers and cross-functional partners to align on governance approaches, and drives discovery and remediation as a continuous, programmatic discipline.
Key Responsibilities:
Continuously discover and inventory AI agents, MCP servers and other non-human identities across cloud, SaaS and on-premises environments as they're provisioned, modified or retired
Design and enforce governance controls - registration, ownership assignment, least-privilege scoping and credential lifecycle management for non-human identities
Build and maintain automated detection for unmanaged or "shadow" AI agents and service identities, closing visibility gaps before risk increases
Lead cross-functional alignment with platform, DevOps and AI/ML engineering teams to embed identity governance into agent and MCP server provisioning workflows, influencing teams outside the security organization to adopt consistent practices and standards
Define and maintain policies for non-human identity authentication, authorization and session boundaries, aligned to Zero Trust principles
Monitor for anomalous behavior, privilege drift and policy violations among AI agents and machine identities, and lead remediation
Maintain an accurate, continuously updated risk register and ownership map for all identities in scope
Evaluate emerging tools and standards for AI agent identity and MCP governance; lead adoption decisions, build the business case for investment, and drive implementation across impacted teams where adoption strengthens Newell's security posture
Develop and present reporting and metrics on non-human identity coverage, risk and remediation to security leadership and cross-functional stakeholders; advise on program priorities and translate findings into actionable recommendations that influence department-level decisions
Provide technical mentorship and guidance to junior and mid-level security engineers; may lead significant portions of complex cross-functional initiatives and serve as a subject matter authority for non-human identity across the security organization
Required Qualifications:
5+ years of experience in identity and access management, cloud security or infrastructure security engineering
Hands-on experience managing service accounts, workload identities or machine-to-machine authentication in a cloud environment (AWS, Azure or GCP)
Deep knowledge in AI agent architectures and the Model Context Protocol (MCP), including how agents authenticate and interact with tools and data, with demonstrated ability to translate that knowledge into governance policy and engineering standards
Experience with identity governance concepts - access certification, entitlement review, ownership assignment applied to non-human identities
Knowledge and experience with modern authentication standards (OAuth 2.0, OIDC, SPIFFE/SPIRE, mTLS) as they apply to machine and workload identity, with experience applying these standards to define enterprise-level policies
Strong scripting or automation skills (Python, PowerShell or Terraform) to build discovery and governance tooling at scale
Ability to operate independently in ambiguity and define structure where none exists - this space is rapidly evolving, standards are still forming, and the role requires establishing program frameworks, influencing organizational direction and driving adoption across functions
Preferred Qualifications:
Experience with cloud security posture management (CSPM) or cloud infrastructure entitlement management (CIEM) tools
Familiarity with secrets management platforms (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault)
Exposure to AI/ML platform engineering or LLM application architecture
Relevant certifications (AWS/Azure/GCP security specialty, CISSP, or equivalent)
The Remote base pay range for this position is from $136,000 to $187,000. Salary will be based on prior experience related to the skills required for this position.
Newell Brands (NASDAQ: NWL) is a leading global consumer goods company with a strong portfolio of well-known brands, including Rubbermaid, Sharpie, Graco, Coleman, Rubbermaid Commercial Products, Yankee Candle, Paper Mate, FoodSaver, Dymo, EXPO, Elmer’s, Oster, NUK, Spontex and Campingaz. We are focused on delighting consumers by lighting up everyday moments. Newell Brands and its subsidiaries are Equal Opportunity Employers and comply with applicable employment laws. EOE/M/F/Vet/Disabled are encouraged to apply.
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.