Lead AI Security Engineer, AI Identities

About the role

AI Identity Security team at Mastercard secures the identities of AI models, agents, services and pipelines. The Lead AI Security Engineer designs discovery mechanisms, defines lifecycle controls, enforces least‑privilege policies and implements continuous monitoring for AI identities. Pune, India, on-site role with occasional travel for audits and stakeholder meetings.

What you’ll do

• Design and operate mechanisms to discover and inventory AI identities across models, agents, workflows and service accounts
• Define and operationalize lifecycle controls for creation, modification, rotation, suspension and decommissioning of AI identities
• Design and enforce least‑privilege access models and policy‑based controls for AI identities
• Implement continuous monitoring, detection of anomalous behavior and risk assessment for AI identities
• Conduct security assessments, threat modeling and control validation for AI identity usage
• Develop SOPs, runbooks and reporting metrics for AI identity posture
• Advise and train engineering teams on AI identity security best practices
• Research emerging AI identity threats and evaluate new security tools

What you’ll bring

• Bachelor's or Master's degree in Computer Science, Information Security, Engineering or related field
• Strong experience in identity and access management, security engineering or security operations with exposure to AI systems
• Expertise in Zero Trust Architecture, Delegated Authority Management, Cryptographic Identities and short‑lived credentialing
• Practical experience securing non‑human identities, service accounts, APIs or machine‑to‑machine access
• Understanding of AI/ML architectures and identity usage across data pipelines and model execution
• Relevant certifications such as CISSP, GIAC, CIAM/IAM or cloud security certifications