EY Global Delivery Services is seeking a Senior AI Engineer to spearhead the design and implementation of AI-driven solutions within Identity and Access Management (IAM) and Cybersecurity. This pivotal role will focus on leveraging AI to address modern IAM complexities, including identity governance, access management, privileged access, directory services, and non-human identity security. The successful candidate will collaborate closely with IAM, Cyber, cloud, and business stakeholders to translate client challenges into practical AI opportunities and deliver robust, scalable solutions and prototypes.

The core objective is to enhance identity risk visibility, optimize access decisioning, improve governance efficiency, and boost operational effectiveness through AI. This position demands strong hands-on engineering expertise, a passion for the IAM and Cyber domains, and a proven ability to apply AI, automation, and analytics to solve complex enterprise identity issues. While technical proficiency in AI and IAM technologies is crucial, the role emphasizes problem-solving, a consultative approach, solution ownership, and contributing to large-scale IAM transformation initiatives.

Design, develop, and deploy AI solutions for IAM and Cybersecurity use cases, encompassing SSO, MFA, Conditional Access, IGA, PAM, AD/Entra ID, and NHI.

Build advanced AI/ML capabilities utilizing Python, PowerShell, LLM/SLM APIs, embeddings, RAG, LangChain, LangGraph, MCP, ADKs, and AI orchestration engines.

Create agentic AI workflows, copilots, and automation frameworks for access requests, certification campaigns, provisioning, privileged access management, remediation, and identity operations.

Integrate AI solutions with key platforms like SailPoint, Saviynt, CyberArk, Microsoft Entra ID, Active Directory, Azure, AWS, Microsoft Graph API, SIEM/SOAR, Splunk, Microsoft Sentinel, Microsoft Defender, CrowdStrike, and XDR.

Analyze diverse logs (identity, access, privilege, vault, directory, activity, security) to detect risk patterns, anomalies, provide access recommendations, identify role mining opportunities, and uncover policy gaps.

Support AI-driven IAM governance, including risk-based authentication and provisioning, access reviews, compliance checks, SOD, identity lifecycle orchestration, and audit-ready reporting.

Apply ML techniques such as classification, optimization, time series analysis, pattern recognition, NLP, UEBA, anomaly detection, and predictive risk scoring for comprehensive identity and access intelligence.

Address Non-Human Identity (NHI) use cases, focusing on service accounts, managed identities, service principals, enterprise applications, API-based identities, workload identities, agent identities, token misuse, and agent overreach controls.

Contribute to PAM analytics and automation using CyberArk, Privilege Cloud, EPM, EPV, CPM, PSM, JIT/JEA, password rotation, secret lifecycle management, session monitoring, and vault log analytics.

Develop insightful dashboards and visualizations using Power BI, Tableau, and identity analytics views to communicate access risk, compliance posture, user activity trends, and remediation priorities.

Collaborate effectively with business, cyber, and IAM stakeholders to transform problem statements into tangible working prototypes, scalable solutions, and executive-level recommendations.

Demonstrate over 5 years of extensive hands-on experience in AI engineering, software development, data science, automation, cybersecurity analytics, or IAM technology delivery.

Possess practical experience in developing AI applications leveraging LLM/SLM APIs, RAG, embeddings, prompt engineering, agentic AI, AI agents, copilots, and multi-agent workflows.

Showcase strong programming and automation proficiency in Python, PowerShell, APIs, and basic SQL. Familiarity with Microsoft Graph API is essential, with HTML, CSS, and JavaScript exposure being a plus.

Have hands-on experience with Azure AI, OpenAI, AWS, and Python-based AI/ML frameworks, including ML models, classification, optimization, NLP, pattern recognition, time series analysis, and anomaly detection.

Exhibit working knowledge of core IAM concepts such as SSO, MFA, Conditional Access, SAML, OAuth, OIDC with PKCE, authentication, authorization, federation, certificate management, and key management.

Possess working knowledge of Microsoft Entra ID and Active Directory, including Entra Connect, Cloud Sync, Directory Services, DNS, Global Catalog, GPO, OU, Domains/Forests, FSMO roles, and Sites and Services.

Have experience or strong exposure to IGA platforms and concepts like SailPoint, Saviynt, identity lifecycle management, access reviews, certification campaigns, role mining, SOD, access risk assessment, and policy compliance.

Showcase experience or strong exposure to PAM concepts and tools, including CyberArk, Privilege Cloud, EPM, EPV, CPM, PSM, JIT/JEA, password rotation, secrets management, session monitoring, and vault log analysis.

Understand Non-Human Identity (NHI) and AI-driven identity security principles related to service accounts, managed identities, service principals, enterprise applications, API-based identities, workload identities, agent identities, and token controls.

Have experience with security monitoring or analytics platforms such as SIEM, SOAR, UEBA, Splunk, Microsoft Sentinel, Microsoft Defender, CrowdStrike, XDR, and Identity Protection.

Maintain a strong consulting mindset, with the ability to clearly articulate complex AI, IAM, and Cybersecurity topics to both technical teams and leadership stakeholders.