Netradyne
About this role
Netradyne builds computer vision and edge computing for fleet safety, with more than 25 billion miles analysed, and this role secures the identity layer behind all of it. The work is enterprise identity and access management across Microsoft and AWS: Entra ID governance, conditional access, AWS IAM policies and roles across multiple accounts, privileged access management, and MFA, SSO and federation in a hybrid environment. The genuinely current part is that Netradyne also wants identity controls for AI agents, including Copilot Studio agents, Model Context Protocol integrations and agent to service authentication, which is a skill very few people have yet and a reasonable thing to learn on the job. It asks 3 to 6 years, and states openly that it will consider more senior candidates with broader security backgrounds.
Who this is for
What the posting asks for:
- 3 to 5 years of hands on experience with IAM technologies and solutions. The header states the band as 3 to 6 years, and the posting adds that senior level candidates with broader security expertise will also be considered.
- Demonstrated expertise in Microsoft Entra ID, including administration and configuration.
- A solid understanding of AWS IAM: identity federation, cross account access and policy management.
- Experience with at least one privileged access management solution: Delinea Secret Server, BeyondTrust, CyberArk or similar.
- Strong understanding of authentication and authorisation protocols: OAuth, SAML, LDAP and Kerberos.
- Knowledge of compliance frameworks: Zero Trust, NIST, SOC 2 and ISO 27001.
- Excellent communication and documentation skills.
Counts as a bonus:
- SC-300 (Microsoft Certified Identity and Access Administrator Associate) or similar.
- Experience designing and securing AI agent architectures and autonomous workflows, and hands on work with Copilot Studio agent security.
- Knowledge of Model Context Protocol and agent to service authentication patterns.
- RBAC model design across complex application ecosystems.
- Automating provisioning and deprovisioning with Okta, ServiceNow or Microsoft Identity Manager.
- Multi cloud experience (Azure, AWS, GCP), Zero Trust architecture, scripting in PowerShell, Python or Bash, and identity first incident response.
The day to day: designing and maintaining identity governance in Entra ID including provisioning, authentication policies and conditional access; managing AWS IAM policies and roles across accounts on least privilege; running PAM to monitor and audit privileged activity; configuring MFA, SSO and federation across hybrid environments; running security audits and access reviews; integrating IAM with enterprise and SaaS applications; managing access for AI agents including scope limits, token management and service principal governance; designing RBAC models; automating provisioning and deprovisioning; and responding to identity compromise incidents.
Experience: the posting gives 3 to 6 years in the header and 3 to 5 years in the required qualifications. We have published the wider band because the posting also invites more senior applicants.
Location: Bengaluru.
Who should apply: an IAM or cloud security engineer around three to six years in. The AI agent identity work is the differentiator: it is early enough that few candidates will have it, so a strong IAM background plus genuine curiosity about agent authentication is likely to be competitive.
- 3 to 5 years of hands on experience with IAM technologies and solutions. The header states the band as 3 to 6 years, and the posting adds that senior level candidates with broader security expertise will also be considered.
- Demonstrated expertise in Microsoft Entra ID, including administration and configuration.
- A solid understanding of AWS IAM: identity federation, cross account access and policy management.
- Experience with at least one privileged access management solution: Delinea Secret Server, BeyondTrust, CyberArk or similar.
- Strong understanding of authentication and authorisation protocols: OAuth, SAML, LDAP and Kerberos.
- Knowledge of compliance frameworks: Zero Trust, NIST, SOC 2 and ISO 27001.
- Excellent communication and documentation skills.
Counts as a bonus:
- SC-300 (Microsoft Certified Identity and Access Administrator Associate) or similar.
- Experience designing and securing AI agent architectures and autonomous workflows, and hands on work with Copilot Studio agent security.
- Knowledge of Model Context Protocol and agent to service authentication patterns.
- RBAC model design across complex application ecosystems.
- Automating provisioning and deprovisioning with Okta, ServiceNow or Microsoft Identity Manager.
- Multi cloud experience (Azure, AWS, GCP), Zero Trust architecture, scripting in PowerShell, Python or Bash, and identity first incident response.
The day to day: designing and maintaining identity governance in Entra ID including provisioning, authentication policies and conditional access; managing AWS IAM policies and roles across accounts on least privilege; running PAM to monitor and audit privileged activity; configuring MFA, SSO and federation across hybrid environments; running security audits and access reviews; integrating IAM with enterprise and SaaS applications; managing access for AI agents including scope limits, token management and service principal governance; designing RBAC models; automating provisioning and deprovisioning; and responding to identity compromise incidents.
Experience: the posting gives 3 to 6 years in the header and 3 to 5 years in the required qualifications. We have published the wider band because the posting also invites more senior applicants.
Location: Bengaluru.
Who should apply: an IAM or cloud security engineer around three to six years in. The AI agent identity work is the differentiator: it is early enough that few candidates will have it, so a strong IAM background plus genuine curiosity about agent authentication is likely to be competitive.
Apply on company site
Opens job-boards.greenhouse.io, the employer's own application page. Applying is always free.