GDS Cyber - AI Driven IAM - Senior
Ernst and Young30 days ago
Bengaluru, IndiaSenior
Responsibilities
- Design, develop, and operationalize AI solutions for IAM and cybersecurity use cases across SSO, MFA, Conditional Access, IGA, PAM, Active Directory, Entra ID, and non-human identities.
- Build AI/ML capabilities using Python, PowerShell, LLM/SLM APIs, embeddings, RAG, LangChain, LangGraph, MCP, ADKs, and AI orchestration engines.
- Develop agentic AI workflows, copilots, and automation for access requests, certification campaigns, provisioning, privileged access, remediation, and identity operations.
- Integrate AI solutions with IAM, PAM, cloud, SIEM/SOAR, security monitoring, identity protection, and XDR platforms.
- Analyze identity, access, privilege, directory, activity, and security logs to identify anomalies, access recommendations, role-mining opportunities, policy gaps, and identity risks.
- Support AI-driven IAM governance, including risk-based authentication, provisioning, access reviews, compliance checks, segregation of duties, lifecycle orchestration, and audit-ready reporting.
- Apply ML, classification, optimization, time-series analysis, pattern recognition, NLP, UEBA, anomaly detection, and predictive risk scoring.
- Address non-human identity use cases involving service accounts, managed identities, service principals, enterprise applications, workload identities, agent identities, token misuse, and agent overreach.
- Contribute to PAM analytics and automation involving CyberArk, vaults, privileged sessions, just-in-time access, password rotation, secrets, and session monitoring.
- Create Power BI and Tableau dashboards and collaborate with IAM, cyber, business, and leadership stakeholders on prototypes, scalable solutions, and recommendations.
Requirements
- At least 5 years of hands-on experience in AI engineering, software development, data science, automation, cybersecurity analytics, or IAM technology delivery.
- Practical experience building AI applications using LLM/SLM APIs, RAG, embeddings, prompt engineering, agentic AI, AI agents, copilots, and multi-agent workflows.
- Strong programming and automation experience with Python, PowerShell, APIs, SQL basics, and Microsoft Graph API; HTML, CSS, and JavaScript exposure is preferred.
- Hands-on exposure to Azure AI, OpenAI, AWS, Python-based AI/ML frameworks, ML models, classification, optimization, NLP, pattern recognition, time-series analysis, and anomaly detection.
- Working knowledge of IAM concepts including SSO, MFA, Conditional Access, SAML, OAuth, OIDC with PKCE, authentication, authorization, federation, certificate management, and key management.
- Working knowledge of Microsoft Entra ID, Active Directory, Entra Connect, Cloud Sync, Directory Services, DNS, Global Catalog, GPO, OU, domains and forests, FSMO roles, and Sites and Services.
- Experience with IGA platforms and concepts such as SailPoint, Saviynt, identity lifecycle, access reviews, certification campaigns, role mining, SOD, access risk, and policy compliance.
- Experience with PAM concepts and tools including CyberArk, Privilege Cloud, EPM, EPV, CPM, PSM, JIT/JEA, password rotation, secrets, session monitoring, and vault logs.
- Understanding of non-human identity and AI identity security, including service accounts, managed identities, service principals, enterprise applications, API-based identities, workload identities, agent identities, and token controls.
- Experience with security monitoring or analytics platforms such as SIEM, SOAR, UEBA, Splunk, Microsoft Sentinel, Microsoft Defender, CrowdStrike, XDR, and Identity Protection.
- Ability to communicate AI, IAM, and cybersecurity topics clearly to technical teams and leadership stakeholders.
- Preferred qualifications include experience with AI-driven IAM transformation, data pipelines, model monitoring, observability, MLOps, scalable enterprise AI deployment, Power BI, Tableau, data storytelling, SOX, GDPR, HIPAA, ISO 27001, CISSP, CISM, SailPoint, Saviynt, CyberArk, Azure AI, or Google ML certifications.
- Consulting, professional services, or large-enterprise experience is a plus.
Benefits
- Flexible work environment with professional development, mentorship, leadership opportunities, and continuous learning.
- Health and wellness packages, rewards, and learning opportunities are offered.
- EY promotes diversity, equity, inclusion, accommodations during recruitment, and globally connected teams.
Tech Stack
Categories
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.