Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this AVP, IAM AI Engineer role.

Rezi rewrites your resume against LPL Financial's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the AVP, IAM AI Engineer posting at LPL Financial — free, in seconds.

About the Role

We are seeking an AVP, IAM AI Engineer to design, operationalize, and automate identity controls for human and non-human actors, focusing on AI agents and emerging non-human identities. This role involves building runtime controls, secrets workflows, and governance guardrails for safe AI adoption, and leading a team to scale these efforts. You will be integrated into AI development from the early stages to ensure identity, authentication, and authorization are foundational.

Responsibilities

Operationalize and automate identity runtime controls for human and non-human identities, including real-time authentication, authorization, and policy enforcement.
Design, build, and automate governance controls for AI agents and non-human identities across their full lifecycle.
Develop and automate secrets-management workflows for AI systems and agents.
Define and enforce fine-grained, least-privilege authorization models for agents and workloads using policy-as-code.
Establish standards and reference patterns for identity flows in agentic systems.
Partner with engineering and data science teams on AI application development to integrate identity, AuthN/AuthZ, and secrets handling.
Support the deployment and adoption of IAM controls for end users.
Integrate identity telemetry with SIEM/SOC tooling, build monitoring for NHI/agent behavior, and support incident response.
Partner with GRC, risk, and audit stakeholders to ensure controls meet requirements and produce audit evidence.
Recruit, build, mentor, and lead a team to support these workstreams and set technical direction for NHI and agentic IAM.

Requirements

5+ years in identity & access management or information security, including hands-on engineering.
Demonstrated experience building and/or leading technical teams.
5+ years with Ping Identity (PingFederate / PingOne / PingAccess) or a comparable access-management / federation platform.
5+ years with SailPoint (IdentityIQ / Identity Security Cloud) or a comparable identity governance & administration (IGA) platform.
3+ years with Idira (CyberArk, formerly Conjur) / HashiCorp Vault or a comparable secrets-management platform.
Working knowledge of identity and authorization for users and agents, including user-to-agent and agent-to-agent (A2A) patterns, OIDC and OAuth 2.0/2.1 tokens, and API keys.
Strong automation and engineering skills: proficiency in a scripting/programming language (e.g., Python), infrastructure-as-code (e.g., Terraform), CI/CD pipelines, and REST API integration.
Experience applying IAM in cloud environments (AWS, Azure, and/or GCP) and in containerized / Kubernetes workloads.
Familiarity with workload-identity and machine-identity standards: SPIFFE/SPIRE, OAuth token exchange (RFC 8693), mTLS, and cloud workload-identity federation.
Working understanding of AI/agentic systems: LLMs, agent frameworks, tool-calling, and emerging authentication patterns such as the Model Context Protocol (MCP).
Experience in a regulated industry (financial services, healthcare, etc.) and with associated compliance regimes.
Relevant certifications, e.g., CISSP, CyberArk (Defender/Sentry), SailPoint, Ping, or a major cloud security certification.
Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.

Skills

Identity and Access Management (IAM)
Information Security
AI Agents
Non-Human Identities (NHI)
Runtime Controls
Secrets Management
Governance
Policy-as-Code
Ping Identity
SailPoint
CyberArk
HashiCorp Vault
Python
Terraform
CI/CD
REST API
AWS
Azure
GCP
Kubernetes
SPIFFE/SPIRE
OAuth 2.0/2.1
OIDC
mTLS
LLMs
Model Context Protocol (MCP)

Location

Hybrid

Work Type

Hybrid
Full-time

Experience Level

Associate Vice President (AVP)
5+ years in identity & access management or information security
5+ years with Ping Identity or comparable platform
5+ years with SailPoint or comparable platform
3+ years with Idira / HashiCorp Vault or comparable platform

Education Level

Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.

Salary/Compensations

$122,570.00 - $204,249.00

Benefits

401K matching
Health benefits
Employee stock options
Paid time off
Volunteer time off

About the Company

LPL Financial Holdings Inc. is a fast-growing wealth management firm in the U.S., supporting over 32,000 financial advisors and approximately 1,100 financial institutions. The firm provides a wide range of affiliation models, investment solutions, fintech tools, and practice management services. LPL empowers advisors and institutions with the freedom to choose their business model, services, and technology resources to run thriving businesses and manage client relationships effectively.
At LPL, independence means advisors and institution leaders have the freedom to choose their business model, services, and technology resources. They have the flexibility to do business their way and manage client relationships, knowing their clients best. LPL supports its advisors and institutions so they can support their clients.

Equal Opportunity

Principals only. EOE.