Description du poste
Position: Senior Cyber security Architect Location: Dallas Texas Hybrid Duration: Long Term Contract Job Summary:
We are seeking an experienced Cybersecurity Architect to design integrated authorization architecture and governance model for AI applications and agents across SWA within the Identity and Access Management space; evaluate and recommend new and/or existing capabilities and tools that integrate with SWA infrastructure, including emerging technologies; and to serve as Subject Matter Expert to Cybersecurity Teams on identity governance for AI systems, building durable capabilities.
WORK ACTIVITIES/CONTEXT:
Define the enterprise target-state architecture and governance model for identities, delegated authority, and authorization across AI applications, agents, tools, APIs, and human users.
Establish reusable authorization patterns for user-to-agent, agent-to-tool, machine-to-machine, and agent-to-agent interactions.
Design policy enforcement approaches that support least privilege, ZSP, separation of duties, context-aware access, runtime decisioning, and human-in-the-loop guardrails.
Define lifecycle governance for AI agents and other non-human identities, including registration, sponsorship, ownership, credential issuance, rotation, recertification, suspension, deprovisioning, and evidence retention.
Develop standards for OAuth 2.0, OIDC, token exchange, workload identity, delegated authorization, service accounts, and short-lived credentials.
Evaluate vendor and native platform capabilities; document options, tradeoffs, integration impacts, risks, and recommendations for Southwest.
Partner with IAM, IGA, PAM, Enterprise Access Management, Cloud Security, Application Security, AI Engineering, AI Governance, Enterprise Architecture, and platform teams to align controls and operating responsibilities.
Create reference architectures, design principles, control requirements, decision records, implementation roadmaps, and adoption guidance.
Support solution reviews and threat-informed design decisions for AI use cases, MCP servers, agent tools, data access paths, and autonomous actions.
Define logging, traceability, audit evidence, and monitoring requirements that connect an agent action to the agent identity, sponsoring owner, delegated user or system, authorization decision, and affected resource....