GDS Cyber - AI Driven IAM - Senior
Ernst and Young4 days ago
Noida, IndiaSenior
Responsibilities
- Design, develop, and operationalize AI solutions for SSO, MFA, Conditional Access, IGA, PAM, Active Directory, Microsoft Entra ID, and non-human identity security use cases.
- Build AI/ML capabilities, agentic workflows, copilots, RAG applications, and automation frameworks for access requests, certification campaigns, provisioning, privileged access, remediation, and identity operations.
- Integrate AI solutions with IAM, PAM, cloud, directory, SIEM/SOAR, and security analytics platforms including SailPoint, Saviynt, CyberArk, Microsoft Entra ID, Azure, AWS, Splunk, Microsoft Sentinel, Microsoft Defender, CrowdStrike, and XDR platforms.
- Analyze identity, access, privilege, directory, activity, and security logs to identify anomalies, risk patterns, access recommendations, role-mining opportunities, and policy gaps.
- Support AI-driven IAM governance, including risk-based authentication, risk-based provisioning, access reviews, compliance checks, segregation of duties, lifecycle orchestration, and audit-ready reporting.
- Apply machine learning, classification, optimization, time-series analysis, pattern recognition, NLP, UEBA, anomaly detection, and predictive risk scoring to identity and access intelligence.
- Develop non-human identity security use cases covering service accounts, managed identities, service principals, enterprise applications, workload identities, agent identities, token misuse, and agent overreach controls.
- Contribute to PAM analytics and automation involving CyberArk, password rotation, secrets lifecycle management, session monitoring, and vault log analytics.
- Create Power BI and Tableau dashboards and identity analytics views explaining access risk, compliance posture, user activity trends, and remediation priorities.
- Collaborate with business, cybersecurity, and IAM stakeholders to turn problem statements into prototypes, scalable solutions, and executive-ready recommendations.
Requirements
- At least 5 years of hands-on experience in AI engineering, software development, data science, automation, cybersecurity analytics, or IAM technology delivery.
- Practical experience building AI applications with LLM/SLM APIs, RAG, embeddings, prompt engineering, agentic AI, AI agents, copilots, and multi-agent workflows.
- Strong experience with Python, PowerShell, APIs, SQL fundamentals, and Microsoft Graph API; HTML, CSS, and JavaScript exposure is preferred.
- Hands-on exposure to Azure AI, OpenAI, AWS, Python-based AI/ML frameworks, machine learning models, classification, optimization, NLP, pattern recognition, time-series analysis, and anomaly detection.
- Working knowledge of IAM concepts including SSO, MFA, Conditional Access, SAML, OAuth, OIDC with PKCE, authentication, authorization, federation, certificate management, and key management.
- Working knowledge of Microsoft Entra ID, Active Directory, Entra Connect, Cloud Sync, Directory Services, DNS, Global Catalog, GPO, OU, domains and forests, FSMO roles, and Sites and Services.
- Experience with IGA platforms and concepts such as SailPoint, Saviynt, identity lifecycle management, access reviews, certification campaigns, role mining, segregation of duties, access risk, and policy compliance.
- Experience with PAM concepts and tools including CyberArk, Privilege Cloud, EPM, EPV, CPM, PSM, JIT/JEA, password rotation, secrets, session monitoring, and vault logs.
- Understanding of non-human identity and AI identity security, including service accounts, managed identities, service principals, enterprise applications, API-based identities, workload identities, agent identities, and token controls.
- Experience with security monitoring or analytics platforms such as SIEM, SOAR, UEBA, Splunk, Microsoft Sentinel, Microsoft Defender, CrowdStrike, XDR, and Identity Protection.
- Ability to communicate AI, IAM, and cybersecurity topics clearly to technical teams and leadership stakeholders.
- Preferred experience identifying AI use cases for IAM transformation, identity analytics, access recommendations, non-human identity governance, and automated remediation.
- Preferred experience with data pipelines, identity and privilege analytics pipelines, model monitoring, observability, MLOps, scalable enterprise AI deployment, Power BI, Tableau, dashboards, and data storytelling.
- Preferred exposure to SOX, GDPR, HIPAA, ISO 27001, CISSP, CISM, SailPoint, Saviynt, CyberArk, Azure AI, or Google ML certifications, and consulting, professional services, or large-enterprise environments.
Benefits
- Flexible work environment with professional development, mentorship, leadership opportunities, and continuous learning.
- Health and wellness packages, rewards, and learning opportunities.
- Diverse, inclusive, and globally connected workplace with accommodations available during the recruitment process.
Tech Stack
Categories
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.