GDS Cyber - AI Driven IAM - Senior
Ernst and Young2 months ago
Bengaluru, IndiaSenior
Responsibilities
- Design, develop, and operationalize AI solutions for IAM and cybersecurity use cases across SSO, MFA, Conditional Access, IGA, PAM, AD/Entra ID, and non-human identity domains.
- Build AI/ML capabilities using Python, PowerShell, LLM/SLM APIs, embeddings, RAG, LangChain, LangGraph, MCP, ADKs, and AI orchestration engines.
- Develop agentic AI workflows, copilots, and automation for access requests, certification campaigns, provisioning, privileged access, remediation, and identity operations.
- Integrate AI solutions with IAM, cloud, security monitoring, SIEM/SOAR, and XDR platforms.
- Analyze identity, access, privilege, directory, activity, and security logs to identify risks, anomalies, access recommendations, role-mining opportunities, and policy gaps.
- Support AI-driven IAM governance, including risk-based authentication, provisioning, access reviews, compliance checks, segregation of duties, identity lifecycle orchestration, and audit-ready reporting.
- Apply machine learning, classification, optimization, time-series analysis, pattern recognition, NLP, UEBA, anomaly detection, and predictive risk scoring.
- Work on non-human identity use cases involving service accounts, managed identities, service principals, enterprise applications, workload identities, agent identities, token misuse, and agent overreach.
- Contribute to PAM analytics and automation involving CyberArk, privileged access, password rotation, secrets, session monitoring, and vault analytics.
- Create Power BI and Tableau dashboards and communicate identity risk, compliance posture, activity trends, and remediation priorities to stakeholders.
Requirements
- At least 5 years of hands-on experience in AI engineering, software development, data science, automation, cybersecurity analytics, or IAM technology delivery.
- Practical experience building AI applications with LLM/SLM APIs, RAG, embeddings, prompt engineering, agentic AI, AI agents, copilots, and multi-agent workflows.
- Strong programming and automation experience with Python, PowerShell, APIs, SQL basics, and Microsoft Graph API; HTML, CSS, and JavaScript exposure is preferred.
- Hands-on exposure to Azure AI, OpenAI, AWS, AI/ML frameworks, machine learning models, classification, optimization, NLP, pattern recognition, time-series analysis, and anomaly detection.
- Working knowledge of IAM concepts including SSO, MFA, Conditional Access, SAML, OAuth, OIDC with PKCE, authentication, authorization, federation, certificate management, and key management.
- Working knowledge of Microsoft Entra ID, Active Directory, Entra Connect, Cloud Sync, directory services, DNS, Global Catalog, GPO, organizational units, domains and forests, FSMO roles, and Sites and Services.
- Experience with IGA platforms and concepts such as SailPoint, Saviynt, identity lifecycle, access reviews, certification campaigns, role mining, segregation of duties, access risk, and policy compliance.
- Experience with PAM concepts and tools including CyberArk, Privilege Cloud, EPM, EPV, CPM, PSM, JIT/JEA, password rotation, secrets, session monitoring, and vault logs.
- Understanding of non-human identity and AI identity security, including service accounts, managed identities, service principals, enterprise applications, API-based identities, workload identities, agent identities, and token controls.
- Experience with security monitoring or analytics platforms such as SIEM, SOAR, UEBA, Splunk, Microsoft Sentinel, Microsoft Defender, CrowdStrike, XDR, and Identity Protection.
- Strong consulting and communication skills with the ability to explain AI, IAM, and cybersecurity topics to technical teams and leadership stakeholders.
- Preferred qualifications include experience identifying AI use cases for IAM transformation, data and identity analytics pipelines, model monitoring, observability, MLOps, scalable enterprise AI deployment, Power BI, Tableau, data storytelling, SOX, GDPR, HIPAA, ISO 27001, CISSP, CISM, or related platform certifications.
- Consulting, professional services, or large-enterprise experience is a plus.
Benefits
- Flexible work environment with professional development, mentorship, learning opportunities, and opportunities to take on leadership roles.
- Health and wellness packages, rewards, and learning benefits are offered.
- Inclusive culture focused on diversity, equity, inclusion, belonging, and globally connected teams.
- Disability-related recruitment accommodations are available upon request.
Tech Stack
Categories
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.