Principal Cybersecurity Architect – Identity & Access Management for AI Systems

Switzerland Global Enterprise

Principal Cybersecurity Architect for GE Vernova securing AI systems and agents. Defining strategy and driving cross-functional alignment in cybersecurity, cloud, and business units.

Posted 7/9/2026full-timeRemote • 🇺🇸 United StatesLead💰 $165,800 - $276,200 per yearWebsite

Tech Stack

Tools & technologies

AWSCloudCyber Security

About the role

Key responsibilities & impact

Act as the primary authority on AI identity security, providing guidance to executive leadership and engineering teams
Drive strategy across cybersecurity, cloud platforms, GRC, legal, and business units
Represent the organization in external forums, industry working groups, and vendor discussions regarding AI security standards
Define the long-term IAM architecture for AI systems and agents in cloud and hybrid environments, establishing reusable patterns and reference designs
Oversee the full lifecycle for AI agents, from initial onboarding and cryptographic identity assignment to decommissioning
Maintain an unbroken chain of human ownership and traceability for all autonomous agents
Architect and enforce the Principle of Least Privilege (PoLP), Just-in Time (JIT), and Just-Enough-Access (JEA) patterns for AI workloads
Partner with GRC and privacy teams to ensure AI agent governance meets rigorous regulatory requirements

Requirements

What you’ll need

12+ years in cybersecurity, with a heavy emphasis on IAM
7+ years in Principal/Senior Architect roles for large-scale enterprise or cloud-native environments
Expert-level knowledge of AWS IAM (roles, policies, SCPs, federation) and AWS Identity Center
Proficiency with AWS Bedrock Identity/AgentCore and similar frameworks
Expert understanding of Zero Trust architecture and its application to AI/agentic workloads
Exceptional ability to distill complex technical risks for executive stakeholders
Familiarity with IGA technologies (e.g., Saviyant) and NHI (Non Human Identity) governance
Knowledge of LLM-specific threats (OWASP LLM Top 10) and prompt injection mitigation
Understanding of SPIFFE/SPIRE for workload identity
Certifications: AWS Certified Security – Specialty, CISSP, CISM, or CCSP

Benefits

Comp & perks

medical, dental, vision, and prescription drug coverage
access to Health Coach from GE Vernova, a 24/7 nurse-based resource
access to the Employee Assistance Program, providing 24/7 confidential assessment, counseling and referral services
GE Vernova Retirement Savings Plan
tax-advantaged 401(k) savings opportunity with company matching contributions and company retirement contributions
access to Fidelity resources and financial planning consultants
tuition assistance
adoption assistance
paid parental leave
disability benefits
life insurance
12 paid holidays
permissive time off

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Identity Access Management (IAM)Cloud SecurityCryptographic Identity AssignmentAI Workload GovernancePrompt Injection MitigationWorkload Identity (SPIFFE/SPIRE)NHI GovernanceTechnical Risk AssessmentArchitectural Design PatternsRegulatory Compliance

Soft Skills

Strategic LeadershipStakeholder CommunicationComplex Problem SolvingCollaboration

Certifications

AWS Certified Security – SpecialtyCISSPCISMCCSP