Required skills & experience

* Proven experience delivering technical products in casino, gaming, or hospitality environments

8+ years of experience in security engineering, application security, or platform security

Proven experience delivering enterprise IAM / non-human identity solutions.

Strong foundation in web applications and API security

Experience designing fine-grained least-privilege access models for distributed systems

Experience working with AI-enabled or automation-heavy systems

Familiarity with risks unique to agentic or autonomous systems

Ability to reason about non-deterministic execution and enforce deterministic controls

MCP Security Standards and agent runtime authorization

Experience with WAFs, API gateways, and edge security controls

Familiarity with cloud-native architectures and service-to-service security

Non-Human Identity (NHI) lifecycle management in highly dynamic environments

Deep working knowledge of OAuth 2.0/2.1, OIDC, token exchange (OBO), and modern token security (PKCE, audience binding, short-lived tokens).

Experience with workload identity: SPIFFE/SPIRE, mTLS, and PKI/certificate-based authentication.

Experience with secrets management and eliminating static/long-lived credentials.

Solid grasp of Zero Trust, least privilege, and identity lifecycle/recertification.