Passt das zu Ihnen?
AI Expert (m/f/x) (DE)
[16151]
We are currently looking for two freelance "AI Experts (m/f/x)" for our client in the IT-sector. Start: asap End: 30.09.2026 Capacity: Fulltime Location: Remote Key responsibilities: Security Architecture & AI IAM Design ·Review, assess, and provide feedback for AI security architecture designs with a focus on identity, authorization, and access boundaries: oHuman users, technical users, service identities, AI agents, and autonomous workloads oRole based (RBAC) and attribute based (ABAC) access models oPrivileged and non human access patterns (API keys, certificates) ·Ensure IAM is secure by design and aligned with ECS architectures (e.g., zero trust, least privilege). AI Platform & Integration Expertise ·Design IAM concepts for AI operational services, including: oCloud based AI services using SAP Business AI, SAP BTP, hyperscaler AI services oMLOps pipelines, data platforms, and model lifecycle management oIntegrations between ECS AI services, SAP tools, and external services ·Deep understanding of technical users, service accounts, authentication mechanisms, SAML, workload identities, and token based integrations. ·Deep understanding of tool connectors, instances, access levels and authorizations pertaining to Cloud Access Manager (CAM) and the access provisioning workflows. AI IAM Design, Configuration & Enforcement ·Design, configure, and govern CAM AI access controls, ensuring secure and compliant access to AI capabilities, models, services, and data. ·Configure CAM based AI access policies for: oHuman users, technical users, service principals, service accounts and AI agents oRole based and attribute based access to AI services and workloads oControlled exposure of AI functionality across platforms and integrations ·Ensure CAM AI access configurations are aligned with: oApproved security architecture designs oAI risk classification and governance requirements oEnterprise IAM, cloud IAM, and zero trust principles ·Review and validate CAM AI access setups during security and architecture reviews, identifying gaps, risks, or misconfigurations. Governance, Risk & Compliance ·Ensure AI IAM designs comply with global and regional regulations and standards, including: oEU AI Act oGDPR and data protection principles oISO 27001 / 27017 / 27018 oISO 42001 oNIST (including AI specific security guidance) oC5/KRITIS/IRAP/FSI ·Translate regulatory and risk requirements into implementable IAM controls within AI architectures. ·Support security reviews, audits, and risk assessments related to AI access management. Advisory & Stakeholder Collaboration ·Act as a trusted advisor in the field of IAM to: oAI architects and engineers oSecurity architecture oPlatform, data, and integration teams ·Participate in architecture boards, design reviews, and AI governance forums. ·Contribute and enhance standards, guardrails, reference architectures, and best practices for AI IAM. Required Expertise & Experience: Core IAM & Security Skills ·10+ years of experience in IAM, access governance, and security architecture, ideally in complex enterprise or cloud environments. ·Proven expertise in: oIdentity lifecycle management oAccess provisioning and de provisioning oPrivileged access management (PAM) oSegregation of Duties (SoD) concepts oAI related audit reviews in User Access Management. AI & Technical Knowledge ·Strong understanding of: oAI system components (models, agents, training, inference, data dependencies) oOps and deployment pipelines oNon human identities and machine to machine access ·Hands on experience designing or securing AI enabled systems (e.g., AI platforms, AI services, agents, data pipelines). ·Proven experience configuring and managing AI access through CAM for AI. ·Ability to translate security architecture decisions into enforceable CAM AI access configurations, not just conceptual designs. ·Ability to write technical documentation on AI related access entitlements. ·Experience aligning CAM AI access settings with audit, compliance, and regulatory evidence requirements. Standards, Acts & Regulations ·Deep familiarity with AI related standards and regulations, including: oEU AI Act (risk based AI governance) oGDPR and privacy by design requirements oEthical AI and responsible AI principles ·Ability to integrate regulatory obligations into technical IAM designs, not just policy documents. Nice-to-Have: ·Experience with SAP AI, SAP BTP AI services, SAP Identity Services (IAS/IPS/IAG) or comparable enterprise platforms. ·Prior involvement in enterprise AI governance programs or AI security standards development.
- Review, assess, and provide feedback for AI security architecture designs with a focus on identity, authorization, and access boundaries:
- Human users, technical users, service identities, AI agents, and autonomous workloads
- Role based (RBAC) and attribute based (ABAC) access models
- Privileged and non human access patterns (API keys, certificates)
- Ensure IAM is secure by design and aligned with ECS architectures (e.g., zero trust, least privilege).
- Design IAM concepts for AI operational services, including:
- Cloud based AI services using SAP Business AI, SAP BTP, hyperscaler AI services
- MLOps pipelines, data platforms, and model lifecycle management
- Integrations between ECS AI services, SAP tools, and external services
- Deep understanding of technical users, service accounts, authentication mechanisms, SAML, workload identities, and token based integrations.
- Deep understanding of tool connectors, instances, access levels and authorizations pertaining to Cloud Access Manager (CAM) and the access provisioning workflows.
- Design, configure, and govern CAM AI access controls, ensuring secure and compliant access to AI capabilities, models, services, and data.
- Configure CAM based AI access policies for:
- Human users, technical users, service principals, service accounts and AI agents
- Role based and attribute based access to AI services and workloads
- Controlled exposure of AI functionality across platforms and integrations
- Ensure CAM AI access configurations are aligned with:
- Approved security architecture designs
- AI risk classification and governance requirements
- Enterprise IAM, cloud IAM, and zero trust principles
- Review and validate CAM AI access setups during security and architecture reviews, identifying gaps, risks, or misconfigurations.
- Ensure AI IAM designs comply with global and regional regulations and standards, including:
- EU AI Act
- GDPR and data protection principles
- ISO 27001 / 27017 / 27018
- ISO 42001
- NIST (including AI specific security guidance)
- C5/KRITIS/IRAP/FSI
- Translate regulatory and risk requirements into implementable IAM controls within AI architectures.
- Support security reviews, audits, and risk assessments related to AI access management.
- Act as a trusted advisor in the field of IAM to:
- AI architects and engineers
- Security architecture
- Platform, data, and integration teams
- Participate in architecture boards, design reviews, and AI governance forums.
- Contribute and enhance standards, guardrails, reference architectures, and best practices for AI IAM.
- 10+ years of experience in IAM, access governance, and security architecture, ideally in complex enterprise or cloud environments.
- Proven expertise in:
- Identity lifecycle management
- Access provisioning and de provisioning
- Privileged access management (PAM)
- Segregation of Duties (SoD) concepts
- AI related audit reviews in User Access Management.
- Strong understanding of:
- AI system components (models, agents, training, inference, data dependencies)
- Ops and deployment pipelines
- Non human identities and machine to machine access
- Hands on experience designing or securing AI enabled systems (e.g., AI platforms, AI services, agents, data pipelines).
- Proven experience configuring and managing AI access through CAM for AI.
- Ability to translate security architecture decisions into enforceable CAM AI access configurations, not just conceptual designs.
- Ability to write technical documentation on AI related access entitlements.
- Experience aligning CAM AI access settings with audit, compliance, and regulatory evidence requirements.
- Deep familiarity with AI related standards and regulations, including:
- EU AI Act (risk based AI governance)
- GDPR and privacy by design requirements
- Ethical AI and responsible AI principles
- Ability to integrate regulatory obligations into technical IAM designs, not just policy documents.
- Experience with SAP AI, SAP BTP AI services, SAP Identity Services (IAS/IPS/IAG) or comparable enterprise platforms.
- Prior involvement in enterprise AI governance programs or AI security standards development.
Evgeniya Petrova