IAM EXPERT IN CYBERSECURITY - Agentic Identity Management

Stellantis is one of the global leaders in the development and production of automobiles and light commercial vehicles, as well as in providing mobility solutions. We are one of the world’s leading Mobility Tech Companies, bringing together iconic brands such as Fiat, Jeep, Peugeot, Citroën, RAM, and Abarth. With operations in nearly 30 countries and presence in over 130 markets, we offer clean, connected, accessible, and safe mobility solutions.

What drives us is the talent and diversity of our people, who transform passion and experience into value for our customers, communities, and partners every day. We are looking for individuals who are passionate about automobiles, technology, and innovation to join our team!

This role is part of the Cybersecurity team and focuses on the design, governance, and operation of identities used by AI agents and automation components. The person in this position will ensure secure, compliant, and auditable interactions between agentic systems and enterprise platforms, applying strong identity governance and least-privilege principles.

Main Responsibilities:

• Design and build the Agent Identity Governance Framework, including standards, approval models, lifecycle rules, and access catalogues;

• Define and enforce the lifecycle of agent identities, including creation, onboarding, changes, and decommissioning;

• Design access models for agent identities using least privilege, separation of duties, and time-bound access;

• Define standard permission sets and guardrails for systems, APIs, and allowed operations;

• Integrate agent identities with privileged access management controls when required;

• Define break-glass and emergency procedures for agent workflows;

• Implement logging, monitoring, and audit-ready evidence for agent identity activities;

• Publish standards, guidelines, and operational runbooks for secure agent identity management.

We expect you to have:

• Strong knowledge of identity lifecycle management for non-human identities;

• Solid understanding of identity and access management concepts such as RBAC, ABAC, entitlements, and approval workflows;

• Experience with identity standards and protocols such as OAuth2, OIDC, SAML, SCIM, and directory services;

• Knowledge of privileged access patterns, including just-in-time and just-enough access;

• Experience with API-based integrations and log analysis;

• Bachelor’s degree completed in a technology-related field or equivalent;

• Advanced English proficiency;

• Availability to work onsite in Betim (MG), Brazil.

It will be considered a plus if you have:

• Familiarity with policy-as-code and automation pipelines;

• Knowledge of identity risks related to AI and agentic systems;

• Experience with LLM-based applications and agent orchestration concepts;

• Understanding of secrets management and credential protection;

• Exposure to machine learning operations tooling.