Job description

Job ID: 14555 Alternate Locations: Newell Brands is a leading consumer products company with a portfolio of iconic brands like Graco®, Coleman®, Oster®, Rubbermaid®, Sharpie® and Yankee Candle® - and 24,000 talented teammates around the world. Our culture is built on values in action: Integrity, Teamwork, Passion for Winning, Ownership, and Leadership. We work together to win, grow, and make a real impact—supported by a high-performing, inclusive, and collaborative environment where you can be your best, every day. Job location: Atlanta, GA preferred but will consider remote POSITION OVERVIEW: The Sr. IAM AI Solutions Achitect is responsible for two things. First, making sure that as Newell builds and adopts agentic and generative AI solutions, those solutions are identity-safe. Users and AI agents should only access data and transactions they are authorized for, non-human identities need proper governance, and the configuration layers behind agentic AI (especially MCP and A2A) must be protected and well-managed. Second, finding practical ways to apply AI within the IAM program itself to build better integrations, increase delivery speed, and improve the experience for both our team and our end users. This is not a tower ownership role. The IAM organization operates through established capability towers: IGA, PAM, AM, ILM, and others. This engineer works across all of them, bringing AI expertise and a cross-tower perspective. The day-to-day work happens in close partnership with tower leads and their engineers to define and build AI-related architecture and controls that fit each domain. We view IAM as a business accelerator, not just a security function. When identity is well-architected for AI, the company can move faster with greater confidence. This person is responsible for keeping our IAM capabilities aligned with and actively supporting Newell's AI ambitions. KEY RESPONSIBILITIES: Pillar 1: Enabling Safe AI Development and Consumption 1. Access Governance for AI Solutions •Work with AM and IGA tower leads to define and enforce access control policies for agentic and generative AI solutions, keeping users and agents within their authorized scope. •Partner with tower engineers to design authorization models for AI-enabled applications. Entitlements should be scoped correctly and reviewed through each tower's existing governance processes. •Serve as a resource on AI identity architecture for business and IT teams building AI solutions. Engage the appropriate IAM towers early so controls are part of the design, not added after the fact. 2. Non-Human Identity Governance •Partner with IGA, ILM, and PAM towers to build governance around non-human identities (NHIs) used in AI solutions: agents, service accounts, machine identities, and automated workflows. •Work with ILM to define how NHIs are provisioned, attested, certified, rotated, and decommissioned. These should get the same lifecycle rigor as human identities. •Identify and remediate NHI sprawl, orphaned accounts, and over-privileged automated identities. Coordinate with PAM to confirm that secrets, tokens, and credentials are managed and rotated properly. 3. Agentic AI Configuration Governance (MCP & A2A) •Own the security and governance standards for MCP and A2A configuration layers, working with the AM and PAM towers on authentication, authorization boundaries, tool-use permissions, and logging. •Partner with IGA to govern agent-to-agent trust relationships, delegation scopes, and orchestration flows so they are authorized and auditable. •Work with IAM operations to monitor for configuration drift, unauthorized changes, and misconfigurations that could introduce identity or access risks. •Maintain documentation and operating procedures for agentic AI configuration controls in coordination with InfoSec and AI platform teams. 4. AI Identity Risk & Compliance •Work with tower leads and InfoSec to identify, assess, and address identity-related risks in AI architectures, covering authentication boundaries, authorization logic, and data access patterns. •Track the AI threat landscape, particularly around agent behavior anomalies, prompt injection attacks on identity controls, and unauthorized privilege escalation. Share findings with tower leads to inform their security posture. •Support audits and compliance activities related to AI identity governance, including access reviews, NHI inventories, and configuration attestations. Coordinate with Legal and Privacy as needed. Pillar 2: Applying AI to Strengthen and Accelerate IAM 5. AI-Assisted Integration & Automation •Work with tower leads and engineers to identify where AI (agentic, generative, vibe coding, rapid prototyping) can improve integrations between IAM platforms and IT solutions. •Support tower teams in using AI-assisted development to accelerate the build-out of onboarding connectors, access request workflows, provisioning logic, and monitoring and alerting. •Prototype AI-driven automation that reduces manual effort in lifecycle processes, certifications, privileged access operations, and incident triage. •Evaluate AI-powered tools that could improve IAM operations, shorten integration timelines, or improve data quality, and bring recommendations to leadership. 6. IAM Program AI Guidance •Serve as the IAM program's primary resource on applying AI to improve security, delivery speed, and user experience. Work with each tower to apply AI in ways relevant to their domain. •Research and present emerging AI capabilities relevant to IAM: analytics, anomaly detection, intelligent access recommendations, natural language interfaces. •Develop playbooks and training so IAM staff across all towers can use AI tools effectively in their daily work, from prompt techniques to AI-assisted coding. •Establish development standards for AI-assisted IAM engineering so that quality, security, and consistency hold regardless of which tower does the work. REQUIRED QUALIFICATIONS: •Experience in IAM, identity governance and related information security domains. •Strong understanding of authentication, authorization, access lifecycle management, and privileged access. •Broad knowledge of the IAM stack and how its components connect: client-server models, PAM, ILM, IGA, AM, and the dependencies between them. •Hands-on experience with AI/ML engineering, agentic frameworks, or rapid prototyping approaches like vibe coding. •Scripting or development skills (Python, JavaScript/TypeScript, or similar) for building IAM tooling and automation. •Working knowledge of agentic AI architecture, including MCP, A2A communication, orchestration patterns, and where identity controls fit in those layers. •Understanding of non-human identity types (AI agents, service accounts, machine identities) and the governance challenges they create. •Experience with or strong aptitude for AI-assisted development, including the use of generative AI tools for prototyping, building integrations, and solving technical problems. •Awareness of AI-specific security risks: how agentic and generative AI architectures introduce new attack surfaces for authentication, authorization, and access governance. •Hands-on experience with IAM platforms in hybrid or cloud environments. •Experience working in a matrixed or tower-based model where you drove outcomes through influence and partnership, not direct ownership. •Able to translate complex identity concepts into plain language for developers, business teams, and leadership. •Comfortable balancing innovation with risk, with an orientation toward finding a safe path to yes rather than defaulting to no. •Self-directed and able to manage multiple priorities without close supervision. PREFERRED QUALIFICATIONS: •Experience securing AI-enabled platforms or workflows in an enterprise setting. •Familiarity with AI-driven analytics, anomaly detection, or intelligent recommendations in an IAM context. •Knowledge of machine identity frameworks (SPIFFE/SPIRE) and modern auth standards (OIDC, OAuth 2.0, SAML, SCIM). •Experience with audit, compliance, or regulatory stakeholders. •Relevant certifications: CISSP, CISM, or vendor-specific IAM certs. EDUCATION: Bachelor's degree in Information Security, Computer Science, Information Systems, or a related field, or equivalent professional experience. Demonstrated expertise and a strong delivery track record are valued equally. WHO YOU ARE: You're naturally curious about AI and identity security, and you stay current because the space interests you, not because it's a requirement. You enjoy learning new things and you're just as motivated to teach what you've learned to others. Change and ambiguity don't slow you down; they're part of what drew you to this kind of work. You see IAM as something that enables the business to move, not something that holds it back. When someone brings you an AI use case, your first instinct is to figure out how to make it work safely. You're a builder. You'd rather prototype three approaches than spend the same time explaining why something is difficult. You recognize that the work done in this role directly affects how quickly Newell can adopt AI across the enterprise, and that responsibility is something you take seriously. Newell Brands (NASDAQ: NWL) is a leading global consumer goods company with a strong portfolio of well-known brands, including Rubbermaid, Sharpie, Graco, Coleman, Rubbermaid Commercial Products, Yankee Candle, Paper Mate, FoodSaver, Dymo, EXPO, Elmer’s, Oster, NUK, Spontex and Campingaz. We are focused on delighting consumers by lighting up everyday moments. Newell Brands and its subsidiaries are Equal Opportunity Employers and comply with applicable employment laws. EOE/M/F/Vet/Disabled are encouraged to apply.

Requirements

Must-haves

Job ID: 14555
Pillar 1: Enabling Safe AI Development and Consumption
Access Governance for AI Solutions
Work with AM and IGA tower leads to define and enforce access control policies for agentic and generative AI solutions, keeping users and agents within their authorized scope.
Partner with tower engineers to design authorization models for AI-enabled applications. Entitlements should be scoped correctly and reviewed through each tower's existing governance processes.
Serve as a resource on AI identity architecture for business and IT teams building AI solutions. Engage the appropriate IAM towers early so controls are part of the design, not added after the fact.
Non-Human Identity Governance
Partner with IGA, ILM, and PAM towers to build governance around non-human identities (NHIs) used in AI solutions: agents, service accounts, machine identities, and automated workflows.
Work with ILM to define how NHIs are provisioned, attested, certified, rotated, and decommissioned. These should get the same lifecycle rigor as human identities.
Identify and remediate NHI sprawl, orphaned accounts, and over-privileged automated identities. Coordinate with PAM to confirm that secrets, tokens, and credentials are managed and rotated properly.
Agentic AI Configuration Governance (MCP & A2A)
Own the security and governance standards for MCP and A2A configuration layers, working with the AM and PAM towers on authentication, authorization boundaries, tool-use permissions, and logging.
Partner with IGA to govern agent-to-agent trust relationships, delegation scopes, and orchestration flows so they are authorized and auditable.
Work with IAM operations to monitor for configuration drift, unauthorized changes, and misconfigurations that could introduce identity or access risks.
Maintain documentation and operating procedures for agentic AI configuration controls in coordination with InfoSec and AI platform teams.
AI Identity Risk & Compliance
Work with tower leads and InfoSec to identify, assess, and address identity-related risks in AI architectures, covering authentication boundaries, authorization logic, and data access patterns.
Support audits and compliance activities related to AI identity governance, including access reviews, NHI inventories, and configuration attestations. Coordinate with Legal and Privacy as needed.

Nice-to-haves

Job location: Atlanta, GA preferred but will consider remote
Experience securing AI-enabled platforms or workflows in an enterprise setting.
Familiarity with AI-driven analytics, anomaly detection, or intelligent recommendations in an IAM context.
Knowledge of machine identity frameworks (SPIFFE/SPIRE) and modern auth standards (OIDC, OAuth 2.0, SAML, SCIM).
Experience with audit, compliance, or regulatory stakeholders.
Relevant certifications: CISSP, CISM, or vendor-specific IAM certs.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aimlpythonjavascripttypescript

Platform: successfactors
Effort: medium

Benefits

Benefits detected in the listing.

Vision