Start: September 1, 2026 (ASAP after completion of a comprehensive screening)
Duration: August 31, 2027
Rate: max. €112
Hours: 36–40 per week (36 is the minimum)
Language: Dutch, but proficiency in English is required. The current product owner speaks English.
Self-employed: Yes
Location: Arnhem Stationsplein (Mondays at Parktoren, Thursdays optional office day)
Screening: Extensive. Please note: this may take 4 to 6 weeks and will therefore affect the start date.


Alliander – Identity Security Consultant Non-Human Identities (NHI)

About Alliander

Every day, Alliander works to provide a reliable, affordable, and sustainable energy supply for millions of people in the Netherlands. The energy transition is driving an increasingly digitized landscape in which applications, cloud platforms, OT systems, APIs, IoT solutions, and—to an ever-greater extent—AI solutions communicate and collaborate with one another.

As a result, the number of Non-Human Identities (NHIs)—such as service accounts, workload identities, machine identities, certificates, secrets, API keys, and AI agent identities—is growing rapidly. Effectively managing and securing these digital identities is essential to strengthening Alliander’s cyber resilience and ensuring the security and continuity of its critical processes.

About the position

Within Alliander’s ART IAM, we are launching a new team dedicated entirely to Non-Human Identities (NHI). For this team, we are seeking an Identity Security Consultant who will be responsible for leading the mitigation of NHI-related risks within the organization and establishing sustainable governance processes.

In this role, you serve as the bridge between security findings and operational implementation. You ensure that risks identified through Identity Security platforms are effectively addressed and integrated into structural governance processes.

The team’s first task is to reduce risks and technical debt related to service accounts. After that, the scope will be expanded to include workload identities, machine identities, certificate management, and broader governance of machine identities.

What will you do?

• Coordinate recovery and improvement activities in collaboration with application owners, service owners, and platform teams.
• Analyze and prioritize findings from Identity Security, Identity Threat Detection & Response (ITDR), and future NHI security platforms.
• Translating technical findings into specific business risks and actionable recommendations.
• Monitoring the progress of improvement measures and reducing security risks.
• Developing governance processes for service accounts, workload identities, and machine identities.
• Defining ownership, responsibilities, and operational control measures.
• Establishing sustainable processes for monitoring, reviews, and risk management.
• Supporting further expansion into certificate management and machine identity governance.

What do you bring?

Experience and Knowledge (Must-Haves)

• At least 5 years of demonstrable experience in the fields of security, governance, or Identity & Access Management (IAM), including risk management and process design.
• Strong skills in stakeholder management and communication.
• Experience coordinating improvement and recovery processes involving multiple disciplines.
• The ability to exert influence without direct hierarchical authority.
• Experience in designing governance, control, or operational processes.
• A highly developed sense of risk awareness and a solid risk management mindset.
• The ability to translate technical findings into business impact.
• Excellent facilitation skills and experience leading workshops.
• Experience working in an Agile/SAFe environment, preferably within an Agile Release Train (ART).
• Excellent command of the English language is required; proficiency in Dutch is a plus.

Competencies

Connector

You bring together application owners, service owners, platform teams, and security stakeholders to achieve practical and concrete results.

Risk-Based

You can distinguish between urgent security risks and lower-priority areas for improvement, helping stakeholders focus on the issues with the greatest impact.

Structured

You translate findings into clear actions, ownership, timelines, and governance agreements.

Influential

You drive change through clarity, facilitation, and coordination, even when you don't have direct decision-making authority.

Sustainable

You focus not only on resolving current issues, but also on establishing repeatable governance processes that prevent risks from recurring.

Perks (Nice-to-haves)

• Knowledge of Identity & Access Management (IAM).
• Knowledge of governance related to service accounts.
• Experience with or knowledge of Identity Security and ITDR platforms.
• Experience with audits, compliance, or governance.
• Knowledge of machine identities and certificate management.
• Experience in setting up ownership models and control frameworks.
• Experience in developing roadmaps and maturity models

Core responsibilities:

🔹 Risk Reduction and Remediation

• Identify, analyze, and prioritize risks related to service accounts, workload identities, and machine identities.
• Coordinate recovery efforts with application owners, service owners, and platform teams.
• Monitor progress and ensure that security risks are actually resolved.

🔹 Governance and Process Design

• Designing and implementing governance processes for Non-Human Identities.
• Establishing ownership, responsibilities, and control measures.
• Establishing structural monitoring, review, and improvement processes.

🔹 Stakeholder Management

• Bringing together security teams, platform teams, and business stakeholders.
• Translating technical security findings into understandable business risks and concrete actions.
• Facilitating workshops and building support for improvements.

🔹 Strategic Development

• Reducing technical debt related to service accounts.
• Supporting the expansion into machine identity governance, certificate management, and future NHI solutions.
• Contribute to a mature and future-proof approach to identity security within Alliander.

What makes this role interesting?

Non-human identities are one of the fastest-growing areas of focus within security and IAM. Service accounts, workload identities, and machine identities are often deeply intertwined with business-critical applications and infrastructure. At the same time, ownership, lifecycle management, and governance in this area frequently lag behind.

In this role, you will help Alliander translate insights from security monitoring into concrete risk mitigation measures. You will coordinate improvement initiatives, establish clear accountability, and ensure that sustainable governance processes are embedded throughout the organization. In doing so, you will make a direct contribution to Alliander’s cyber resilience and business continuity.