Data Protection & Identity Manager

Over 50,000 customers globally trust our end-to-end, cloud-driven networking solutions. They rely on our top-rated services and support to accelerate their digital transformation efforts and deliver unprecedented progress. With double-digit growth year over year, no provider is better positioned to deliver scalable outcomes than Extreme.

Inclusion is one of our core values and in our DNA. We are committed to fostering an inclusive workplace that embraces our differences and creates an atmosphere where all our employees thrive because of their differences, not in spite of them.

Become part of Something big with Extreme! As a global networking leader, learn why there's no better time to join the Extreme team.

Job Summary

The Data Protection & Identity Manager will own and advance Extreme's strategy forbothidentity governance across both human and non-human (AI agent) identities,as well as theenterprise-wide Data Loss Prevention (DLP)program. This role is pivotal totheestablishing control over ALL identities, enforcing DLP policies,protecting Extreme'sand stakeholderdate,thusreducing theorganization'sexposure to credential theft, data exfiltration, and malicious activity.

The successful candidate will bring deep technicalexpertise, strong cross-functional collaboration skills, and the leadership to build scalable securityprogramsin a fast-moving AI-drivenenvironment.

Key Responsibilities: Identity Governance & Non-Human Identity (NHI) Management

• Design, implement, andoperatea unified Identity Governance & Administration (IGA)programcovering human, service account, and AI agent identities -with particular focus on controlling the rapidly growing population of AI agent identities, creating theappropriate governancestructure andguardrails based on best practice.
• Establish lifecycle management processes for AI agent identities, including provisioning, entitlement review, and decommissioning, mitigating exposure to credential theft and malicious activity
• Define and enforceleast privilegeaccess models and zero-trust principles across all identity types
• Develop andmaintaina real-time inventory of AI agent identities, their access scopes, and associated risk profiles
• Partner with AI platform and engineering teams to embed identity security controls into agent deployment pipelines
• Lead regular access certification and entitlement review cycles across the enterprise
• Integrate the process for human identity management with theAI agent identities to create a cohesive strategy.
• Be a thought leader within Extreme on howthe adoption of AI agents can beutilizedto add value across the enterprise

Data Loss Prevention (DLP)

• Own and mature the enterprise DLP strategy, policy framework, and toolset, ensuring coverage extends to AI-assisted and agent-driven data flows
• Drive full coverage of data tagging, classification, and sensitivity labelling across structured and unstructured data estates
• Define and enforce DLP policies for email, endpoint, cloud, and AI-assisted workflows
• Manage the DLP exception review process, ensuring risk-based approvals withappropriate audittrails
• Monitor DLP telemetry and investigate high-severity incidents in conjunction with the Security Operations Centre
• Report on DLPprogrameffectiveness, policy coverage, and incident trends to senior leadership and relevant regulatory stakeholders

Job Requirements

The job requirements include but are not limited to the following.

• Hands-on experience designing and operating identity governanceprograms, including non-human and service account identity management
• Demonstratedexpertisein enterprise DLP tooling (e.g., Microsoft Purview, Symantec DLP, Zscaler) and policy development
• Experience with AI/ML platform security, including securing LLM-based agents, APIs, andautomationpipelines, ad MCP environments
• Strong understanding of zero-trust architecture, least-privilege principles, and privileged access management (PAM)
• Familiarity with data classification frameworks and sensitivity labelling at enterprise scale
• Ability to lead cross-functional initiatives and influence stakeholders without direct authority
• Strong analytical and risk assessment skills; ability to translate technical risk into business impact
• Excellent written and verbal communication skills, including executive-level reporting
• Ability to manage multiple concurrentprioritiesand tasksin a fast-paced, high-growth environment
• Self-starter with a continuous improvement mindset and a drive to challenge existing processes

Working Schedule

Monday-Friday,40 hoursper week. On-call rotationrequiredfor high-severity DLP or identity incidents outside standard hours.

Experience & Qualifications

• 8+ years of experience in Information Security, with a minimum of 3 years in identity governance, IAM, or data protection roles
• Experience securing environments with significant AI/ML or automation workloads is strongly preferred
• Hands-on experience with Microsoft Entra ID (Azure AD), Okta, SailPoint, or equivalent IGA platforms
• Experience with SIEM, CASB, andendpointDLP solutions in enterprise environments
• Relevant certifications preferred: CISSP, CISM, CCSP, Microsoft SC-300, or equivalent
• Bachelor's degree in Computer Science, Information Security, or a related field - or equivalent practical experience

Extreme Networks, Inc. (EXTR) creates effortless networking experiences that enable all of us to advance. We push the boundaries of technology leveraging the powers of machine learning, artificial intelligence, analytics, and automation. Over 50,000 customers globally trust our end-to-end, cloud-driven networking solutions and rely on our top-rated services and support to accelerate their digital transformation efforts and deliver progress like never before. For more information, visit Extreme's website or follow us on Twitter, LinkedIn, and Facebook.

We encourage people from underrepresented groups to apply. Come Advance with us! In keeping with our values, no employee or applicant will face discrimination/harassment based on: race, color, ancestry, national origin, religion, age, gender, marital domestic partner status, sexual orientation, gender identity, disability status, or veteran status. Above and beyond discrimination/harassment based on "protected categories," Extreme Networks also strives to prevent other, subtler forms of inappropriate behavior (e.g., stereotyping) from ever gaining a foothold in our organization. Whether blatant or hidden, barriers to success have no place at Extreme Networks.