{"id":1523858,"url":"https://alion.io/job/kemper-identity-security-non-human-identity-analyst","title":"Identity Security & Non-Human Identity Analyst","company":{"id":1805827,"name":"Kemper","domain":"kemper.com","url":"https://alion.io/company/kemper-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":26,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Downers Grove, United States","Dallas, United States","Jacksonville, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":79500,"max":132900,"currency":"USD","period":"year","gross":null,"usd_annual":132900},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true}],"status":"live","first_seen_at":"2026-09-04T00:00:00Z","employer_posted_date":"2026-09-04","last_verified_at":"2026-10-23T04:40:58Z","board_verified":false,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":51},"description":"Location(s)\nDallas, Texas, Jacksonville, Florida, P&C-Butterfield Road-Downers Grove-IL-AACDetails\nKemper is one of the nation’s leading specialized insurers. Our success is a direct reflection of the talented and diverse people who make a positive difference in the lives of our customers every day. We believe a high-performing culture, valuable opportunities for personal development and professional challenge, and a healthy work-life balance can be highly motivating and productive. Kemper’s products and services are making a real difference to our customers, who have unique and evolving needs. By joining our team, you are helping to provide an experience to our stakeholders that delivers on our promises.\nPosition Summary:\nKemper is seeking an Identity Security & Non-Human Identity Analyst to work at our office in Illinois. The analyst builds and operates security controls for non-human identities, including service accounts, workload identities, bots, service principals, secrets, keys, tokens, and certificates. The role requires deep cloud/DevOps and identity lifecycle knowledge, hands-on secrets/credential engineering, automation, and risk-based governance.\nPosition Responsibilities:\nDiscover and classify service accounts, application identities, bots, API keys, tokens, certificates, workload identities, and other machine identities.\nEstablish authoritative inventory, ownership, criticality, lifecycle status, and reconciliation across cloud, directories, CMDB, secrets platforms, and applications.\nEngineer secure secrets, key, token, and certificate creation, storage, rotation, expiration, revocation, and monitoring processes.\nPartner with cloud and DevOps teams on workload identity, managed identities, service principals, Kubernetes identities, CI/CD credentials, and infrastructure-as-code controls.\nIdentify stale, orphaned, embedded, overprivileged, or unmanaged credentials and drive risk-based remediation.\nImplement least privilege, ownership certification, usage analytics, exception management, and governance for machine identities.\nBuild APIs, scripts, onboarding patterns, automated rotation, dashboards, and service metrics to scale the capability.\nPosition Qualifications:\n5+ years of IAM, cloud security, DevOps/DevSecOps, infrastructure security, or related experience\nSubstantial hands-on work experience with non-human identities, secrets, keys, certificates, or workload identity.\nBachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Cloud Computing, or a related discipline, or equivalent relevant professional experience.\nHands-on experience managing secrets, keys, certificates, service accounts, service principals, or workload identities.\nExperience with secrets managers, vaults, certificate lifecycle technologies, or comparable credential-management platforms.\nStrong knowledge of non-human identity risk, least privilege, credential lifecycle, embedded-secret risk, ownership, recertification, and compensating controls.\nStrong understanding of cloud IAM, DevOps, CI/CD, Kubernetes/container identities, APIs, and infrastructure-as-code patterns.\nUnderstanding of cloud and DevOps attack paths involving secrets, tokens, service principals, and workload identities.\nScripting/API and automation capability.\nAbility to reconcile identity data across directories, cloud services, CMDB, secrets platforms, and applications\nAbility to translate technical machine-identity exposure into business and control risk.\nStrong cross-functional collaboration with cloud, DevOps, application, infrastructure, and IAM teams.\nSystems thinking and ability to solve ownership/data-quality problems at scale.\nIndependent capability ownership.\nClear standards and technical documentation.\nPragmatic influence in engineering workflows.\nPreferred Qualifications\nCloud security/architecture certification in AWS, Azure, or GCP.\nVendor certification for the organization's secrets-management or vault platform.\nKubernetes, DevOps, or infrastructure-as-code experience.\nCISSP, CISM, or comparable security credential.\nExperience designing machine-identity governance at enterprise scale.\nThis position works hybrid out of the Chicago or Downers Grove Kemper office.\nThe range for this position is $79,500 to $132,900. When determining candidate offers, we consider experience, skills, education, certifications, and geographic location among other factors. This job is also eligible for our Kemper benefits package (Medical, Dental, Vision, PTO, 401k, etc.)\nSponsorship is not accepted for this role.\nKemper is proud to be an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, disability status or any other status protected by the laws or regulations in the locations where we operate. We are committed to supporting diversity and equality across our organization and we work diligently to maintain a workplace free from discrimination. Kemper does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Kemper and Kemper will not be obligated to pay a placement fee.\nKemper will never request personal information, such as your social security number or banking information, via text or email. Additionally, Kemper does not use external messaging applications like WireApp or Skype to communicate with candidates. If you receive such a message, delete it.","description_format":"text","description_chars":5554,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Property & Casualty Insurance","Life Insurance & Annuities"],"lifecycle":[{"event":"open","at":"2026-09-30T13:23:21Z"}],"visa":[],"liveness":{"score":23,"band":"cold","label":"Long shot","p_open":1,"p_active":0.647,"p_room":0.36,"age_days":50,"expected_fill_days":26,"reasons":["conf:25","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-24T06:02:35Z"},"pay":{"stated_usd_annual":132900,"is_top_pay":false},"html_url":"https://alion.io/job/kemper-identity-security-non-human-identity-analyst","json_url":"https://alion.io/job/kemper-identity-security-non-human-identity-analyst.json","meta":{"generated_at":"2026-10-25T05:44:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7964,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1805827},"rest":"https://alion.io/mcp/rest/get_company?id=1805827"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkemper-identity-security-non-human-identity-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkemper-identity-security-non-human-identity-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkemper-identity-security-non-human-identity-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kemper-identity-security-non-human-identity-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkemper-identity-security-non-human-identity-analyst"}]}