Associate Principal – Non-Human Identity (NHI) Lead

Overview We are seeking a highly experienced Non-Human Identity (NHI) Lead to define and drive the strategic vision, architecture, governance, and implementation of PepsiCo's enterprise Non-Human Identity (NHI) program. The role is responsible for establishing enterprise-wide visibility, lifecycle governance, security controls, policy standards, and risk management for all machine identities, including service accounts, service principals, workloads, API credentials, keys, secrets, certificates, managed identities, bots, and emerging AI Agents.

The individual will lead the enterprise NHI roadmap, governance model, platform strategy, and onboarding programs while partnering with Security, Cloud, Infrastructure, Application Development, DevOps, Platform Engineering, Architecture, Risk & Compliance, and Business teams.

This role requires deep expertise in Identity Security, Cloud Security, Secrets Management, Machine Identity Management, Zero Trust Architecture, and AI Agent Identity Security. The successful candidate will combine strategic leadership with strong technical architecture skills to enable secure, scalable, and automated management of NHI’s across PepsiCo. Responsibilities Enterprise NHI Implementation

Define and own the enterprise-wide NHI vision, strategy, roadmap, and multi-year maturity plan. Establish enterprise standards, policies, and governance frameworks for NHI management. Build and drive program across Cybersecurity, S&T, Cloud, Infrastructure, and Engineering teams. Lead global NHI transformation initiatives and drive adoption across all sectors and business units. Develop KPI/KRI metrics and provide executive reporting to IAM leadership, CISO, and governance boards. Establish NHI operating models, ownership models, and accountability frameworks.

Architecture & Platform Leadership

NHI Discovery, NHI Lifecycle Management, NHI Identity Governance, Secrets Management, Certificate Management, AI Agent Identity Management

Lead architecture reviews for NHI designs across cloud and enterprise platforms. Develop enterprise integration patterns for:

AWS, Azure, GCP, SaaS platforms, DevOps platforms, Containerized workloads, AI Platforms

Workload identities, Service principals, Managed identities, Kubernetes identities, Secrets, Certificates, Machine-to-machine authentication

NHI Discovery & Governance

Lead implementation and adoption of enterprise NHI discovery capabilities. Establish a centralized inventory of:

Service Accounts, Secrets, API Keys, Certificates, Service Principals, Managed Identities, Bot Identities, AI Agent Identities

Define enterprise ownership attribution strategy. Establish risk scoring and classification models. Drive remediation of:

Orphaned NHIs, Dormant Accounts, Excessive Privilege, Long-Lived Credentials, Unmanaged Secrets, Policy Violations

Govern enterprise-wide access review and certification processes for NHI populations.

NHI Lifecycle Management

Define and implement enterprise lifecycle processes for machine identities:

Creation, Modification, Rotation, Recertification, Decommissioning

Drive automation of NHI onboarding and provisioning workflows. Integrate lifecycle processes into:

IGA Platforms, PAM Platforms, CMDB, DevOps Toolchains, ServiceNow

Establish NHI access governance and least-privilege controls.

Secrets & Machine Identity Security

Define enterprise secrets management strategy. Establish governance for:

Encryption Keys, API Credentials, Certificates, Managed Secrets, OAuth Clients

Drive adoption of automated credential rotation. Lead migration from static credentials toward workload identity-based authentication. Define policies for secrets lifecycle management and compliance monitoring.

Risk, Compliance & Governance

Partner with Security, Audit, Risk, and Compliance teams. Establish policy frameworks, dashboards aligned