AVP IAM AI Architect Cyber Security

LPL Financial

Confirmed live yesterday High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Fort Mill, SCCharlotte, NCNew York, NYSan Diego, CAAustin, TX
Salary
$122,673–$204,455 / yr
Employment
Full-time
Posted
9 days ago
Freshness
Confirmed live yesterday
Nearby
99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $198k
This role $164k
$109k $253k
below market most similar roles pay here above market

This role pays less than 72% of similar roles. Most pay $161,250–$235,487 — the blue band above. At the midpoint, this role pays about $164k versus about $198k for comparable roles.

Based on 240 similar postings.

Employer

About LPL Financial

LPL Financial is the largest independent broker-dealer in the United States, providing brokerage and investment advisory services to independent financial advisors and financial institutions. Industry: Financial Services & Wealth Management

LPL Financial currently has 80 open roles on FindRole.

Listed pay typically runs $122,570–$204,249 across 49 roles with salary data.

Most-posted roles

View all roles at LPL Financial

At a glance

TL;DR · AVP IAM AI Architect Cyber Security

Role Posting Log in to save

The AVP, IAM AI Architect Cyber Security joins the security team to lead the design, proof-of-concept, and implementation of identity patterns for AI workloads, conversational agents, and platform integrations. This role involves building and configuring OAuth/OIDC flows, including Auth Code + PKCE, OBO, and token exchange, while securing agent runtimes and tool access. You will design enterprise IAM patterns for delegated access, scoped credentials, and non-human identities across gateways and agent platforms. Key technologies include PingOne AIC, Microsoft Entra ID, SAML, JWT, and secrets management tools like HashiCorp Vault or CyberArk. You will solve the technical challenge of securing AI-aware API gateways and ensuring least-privilege access for autonomous workloads, ultimately defining production-ready identity standards for the enterprise's AI initiatives.

Skills

IAM OAuth 2.0 OIDC PingOne AIC Microsoft Entra ID JWT SAML HashiCorp Vault SailPoint CyberArk Auth0 Kong CI/CD IaC Zero Trust PAM Secrets Management API Gateway BFF MCP

What you'll do

  • Design and implement IAM patterns for AI workloads, conversational agents, and platform integrations.
  • Build and lead proof-of-concept (POC) implementations for end-to-end identity flows and token exchanges.
  • Configure OAuth/OIDC flows including Auth Code + PKCE, OBO, and client credentials across identity providers.
  • Define standards for securing agent tools, data access, and cross-domain integrations using zero trust principles.
  • Evaluate and implement Non-Human Identity (NHI) and secrets management solutions for autonomous workloads.
  • Automate agent onboarding workflows including identity registration and entitlement assignment.
  • Transition validated identity patterns to IAM engineering teams for production rollout.
  • Maintain architecture artifacts, decision records, and runbooks for AI identity services.

What we're looking for

  • 6+ years of experience in IAM, security architecture, or platform engineering with significant IAM scope.
  • 2+ years of experience building IAM POCs and troubleshooting OAuth 2.0 / OIDC flows.
  • 2+ years of experience with PingOne AIC and/or Microsoft Entra ID.
  • Hands-on experience designing identity for APIs, microservices, and BFF architectures.
  • Experience integrating IAM with API gateways, AI/ML platforms, and modern application stacks.
  • Strong knowledge of SAML, OAuth, OIDC, JWT, scopes, and authorization patterns.
  • Experience delivering AI/ML agents or copilots to production (preferred).
  • Relevant certifications such as CISSP, CCSP, Entra, Ping, SailPoint, or AWS (preferred).

Related searches

More AVP jobs AVP jobs in Fort Mill All jobs at LPL Financial

More like this

Similar roles

AVP IAM AI Engineer

LPL Financial

Fort Mill, SC +5 61 days ago
IAM Ping Identity SailPoint HashiCorp Vault Python Terraform Kubernetes AWS Azure GCP OIDC OAuth 2.0 CI/CD REST API SPIFFE SPIRE mTLS SIEM Policy-as-Code
5+ yrs exp Hybrid
Save

ICAM Architect

Booz Allen Hamilton

McLean, VA 93 days ago $86,800–$198,000
Entra ID Identity and Access Management (IAM) Zero Trust Java JavaScript Python PowerShell Groovy RESTful APIs Active Directory LDAP Okta SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) Saviynt Sailpoint Omada Oracle IAM CI/CD DevOps AWS Cognito Azure AD B2C Keycloak Google Cloud Identity MFA NIST FedRAMP CMMC
Save

Identity and Access Management Specialist

Booz Allen Hamilton

Washington, DC +2 22 days ago
Identity and Access Management (IAM) SailPoint Okta Microsoft Entra ID PingIdentity CyberArk Microsoft Identity Manager (MIM) SAML OIDC OAuth RBAC ABAC Directory Services Federated Identity Management
Save

Identity and Access Management Specialist, Senior

Booz Allen Hamilton

Washington, DC +1 1 day ago $86,800–$198,000
Identity and Access Management (IAM) SailPoint Okta Microsoft Entra ID PingIdentity CyberArk Microsoft Identity Manager (MIM) SAML OIDC OAuth RBAC ABAC Directory Services Federated Identity Management
5+ yrs exp
Save

Identity and Access Management Specialist, Senior

Booz Allen Hamilton

Washington, DC +2 37 days ago
Identity and Access Management (IAM) SailPoint Okta Microsoft Entra ID PingIdentity CyberArk Microsoft Identity Manager (MIM) SAML OIDC OAuth RBAC ABAC Directory Services Federated Identity Management root‑cause analysis
5+ yrs exp
Save

Principal Security Engineer, Identity and Access Management

Nordstrom

Seattle, WA 41 days ago
Identity & Access Management (IAM) OAuth 2.0 OpenID Connect SAML SCIM SPIFFE/SPIRE FIDO2 WebAuthn NIST 800-63 AWS IAM Azure Entra ID GCP IAM CIAM SSO Identity Orchestration Zero Trust infrastructure-as-code CI/CD Threat Modeling PCI-DSS CCPA SOX
10+ yrs exp Hybrid
Save