Lead AI Security Engineer, AI Identities
Mastercard · Pune, India
This listing is from the archive and may be closed. Browse the latest experienced jobs for current openings.
Mastercard is hiring a Lead AI Security Engineer, AI Identities in Pune.
Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Lead AI Security Engineer, AI Identities
Responsibilities
AI Identity Discovery & Inventory
- Design and operate mechanisms to discover and inventory AI identities, including:
o AI models, agents, and autonomous workflows o Service accounts, non‑human identities, and API principals used by AI systems o Identities created dynamically through AI pipelines, orchestration tools, and integrations
- Maintain authoritative visibility into where AI identities exist, what they can access, and how they are used across environments.
- Integrate AI identity discovery into broader identity, asset, and AI Security Posture Management (AI‑SPM) capabilities.
AI Identity Lifecycle Management
- Define and operationalize lifecycle controls for AI identities, including creation, modification, rotation, suspension, and decommissioning.
- Ensure AI identities are created with strong provenance, ownership, and accountability, including linkage to business and technical owners.
- Implement controls to prevent identity sprawl, orphaned AI identities, and unmanaged credentials.
Access Control & Policy Enforcement
- Design and enforce least‑privilege access models for AI identities, aligned with the sensitivity of data, models, and actions performed.
- Partner with IAM and platform teams to implement policy‑based access controls, including role‑based, attribute‑based, and context‑aware authorization for AI systems.
- Ensure AI identities comply with enterprise security standards for authentication strength, credential handling, and key/token management.
Monitoring, Detection & Risk Assessment
Requirements
- Bachelor’s or Master’s degree in Computer Science, Information Security, Engineering, or a related field.
- Strong experience in identity and access management, security engineering, or security operations, with exposure to AI or highly automated systems.
- Expertise in Least Agency frameworks, Zero Trust Architecture, Delegated Authority Management, Cryptographic Identities, and Short Lived Credentialing.
- Practical experience securing non‑human identities, service accounts, APIs, or machine‑to‑machine access.
- Understanding of AI/ML architectures and how identities are used across data pipelines, model execution, and agent‑based systems.
- Proven ability to design, assess, and operationalize identity controls at scale.
- Strong analytical and communication skills, with the ability to translate identity risk into actionable security outcomes.
- Relevant certifications such as CISSP, GIAC, CIAM/IAM‑related certifications, or cloud security certifications are desirable.
This role aligns to the NICE Cybersecurity Workforce Framework, with primary alignment to Identity and Access Management, Security Control Assessment, Cybersecurity Architecture, Systems Security Management, and Incident Response work roles.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
- Abide by Mastercard’s security policies and practices;
- Ensure the confidentiality and integrity of the information being accessed;
- Report any suspected information security violation or breach, and
- Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
About Mastercard
See the company's official careers page for full details, then apply using the button below.