Principal Cybersecurity Architect Identity & Access Management for AI Systems

Job Description

Key Responsibilities

Technical Leadership & Strategy

• Enterprise Vision: Act as the primary authority on AI identity security, providing guidance to executive leadership and engineering teams.

• Cross-Functional Alignment: Drive strategy across cybersecurity, cloud platforms, GRC, legal, and business units.

• Thought Leadership: Represent the organization in external forums, industry working groups, and vendor discussions regarding AI security standards.

• Architecture Ownership: Define the long-term IAM architecture for AI systems and agents in cloud and hybrid environments, establishing reusable patterns and reference designs.

AI Agent Lifecycle & Governance

• Identity Management: Oversee the full lifecycle for AI agents, from initial onboarding and cryptographic identity assignment to decommissioning.

• Accountability: Maintain an unbroken chain of human ownership and traceability for all autonomous agents.

• Access Control: Architect and enforce the Principle of Least Privilege (PoLP), Just-in Time (JIT), and Just-Enough-Access (JEA) patterns for AI workloads.

• Compliance: Partner with GRC and privacy teams to ensure AI agent governance meets rigorous regulatory requirements.

Required Qualifications

• Experience: 12+ years in cybersecurity, with a heavy emphasis on IAM.

• Senior Leadership: 7+ years in Principal/Senior Architect roles for large-scale enterprise or cloud-native environments.

• Cloud Expertise: Expert-level knowledge of AWS IAM (roles, policies, SCPs, federation) and AWS Identity Center.

• AI Security: Proficiency with AWS Bedrock Identity/AgentCore and similar frameworks.

• Conceptual Depth: Expert understanding of Zero Trust architecture and its application to AI/agentic workloads.

• Communication: Exceptional ability to distill complex technical risks for executive stakeholders.

Preferred Qualifications

• Multicloud: Experience with Microsoft Azure IAM (Entra ID, Managed Identities, Azure AI). • Governance Tools: Familiarity with IGA technologies (e.g., Saviyant) and NHI (Non Human Identity) governance.

• Agentic Security: Knowledge of LLM-specific threats (OWASP LLM Top 10) and prompt injection mitigation.

• Frameworks: Understanding of SPIFFE/SPIRE for workload identity. • Certifications: AWS Certified Security - Specialty, CISSP, CISM, or CCSP.

The First 12 Months: Measuring Success

• 30 Days: Establish core partnerships with AI Foundry and engineering leads.

• 60 Days: Complete an authoritative assessment of the current AI IAM risk posture.

• 90 Days: Publish the AI agent identity lifecycle framework and enterprise standards.

• 8-12 Months: Scale governance, implement recurring recertification campaigns, and integrate full IAM controls into the AI Foundry delivery pipeline.

Additional Information

GE Vernova offers a great work environment, professional development, challenging careers, and competitive compensation. GE Vernova is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.

GE Vernova will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable).

Relocation Assistance Provided: No

#LI-Remote - This is a remote position

Application Deadline: July 17, 2026

For candidates applying to a U.S. based position, the pay range for this position is between $165,800.00 and $276,200.00. The Company pays a geographic differential of 110%, 120% or 130% of salary in certain areas. The specific pay offered may be influenced by a variety of factors, including the candidate's experience, education, and skill set.

Bonus eligibility: discretionary annual bonus.

This posting is expected to remain open for at least seven days after it was posted on July 08, 2026.

Available benefits include medical, dental, vision, and prescription drug coverage; access to Health Coach from GE Vernova, a 24/7 nurse-based resource; and access to the Employee Assistance Program, providing 24/7 confidential assessment, counseling and referral services. Retirement benefits include the GE Vernova Retirement Savings Plan, a tax-advantaged 401(k) savings opportunity with company matching contributions and company retirement contributions, as well as access to Fidelity resources and financial planning consultants. Other benefits include tuition assistance, adoption assistance, paid parental leave, disability benefits, life insurance, 12 paid holidays, and permissive time off.

GE Vernova Inc. or its affiliates (collectively or individually, "GE Vernova") sponsor certain employee benefit plans or programs GE Vernova reserves the right to terminate, amend, suspend, replace, or modify its benefit plans and programs at any time and for any reason, in its sole discretion. No individual has a vested right to any benefit under a GE Vernova welfare benefit plan or program. This document does not create a contract of employment with any individual.

Client-provided location(s): Boston, MA, Flexible / Remote

Job ID: GE_power-696873098

Employment Type: FULL_TIME

Posted: 2026-07-09T18:33:05