Frontier AI - IAM Automation Engineer
Ernst and Young4 days ago
Wrocław, PolandSenior
Responsibilities
- Lead the design and development of IAM automation and Agentic AI solutions across enterprise, cloud, and hybrid environments.
- Architect multi-agent workflows, adaptive access controls, predictive threat detection, identity analytics, and intelligent IAM workflow automation.
- Build secure integrations using REST APIs, Microsoft Graph API, Model Context Protocol, and enterprise workflows.
- Apply Zero Trust and least-privilege principles to machine-to-machine and agent-to-service interactions.
- Automate IAM security, compliance, and audit controls with logging, monitoring, alerting, and incident-response integrations.
- Design secure CI/CD, DevSecOps, and Infrastructure as Code patterns with appropriate testing and deployment controls.
- Conduct architecture, technical design, and code reviews while mentoring engineers and promoting engineering standards.
- Lead technical escalations, root-cause analysis, prototyping, delivery through production, documentation, and operational handover.
- Advise internal clients on Agentic AI applications for IAM and evaluate emerging identity, automation, and AI technologies.
Requirements
- Degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent practical experience.
- At least 7 years of relevant technology experience, including substantial IAM, authentication engineering, access management, security engineering, or enterprise identity platform experience.
- At least 4 years of hands-on cloud automation or software engineering experience using scripting, APIs, DevOps, and Infrastructure as Code.
- Approximately 2 years of hands-on experience developing, integrating, or deploying AI/ML, Generative AI, or Agentic AI solutions.
- Advanced experience with Microsoft Entra ID, enterprise authentication and authorization, identity protocols, workload identities, federated credentials, and access management.
- Strong hands-on experience with Azure automation services, Ansible, Azure CLI, scripting, software engineering, and secure enterprise integrations.
- Experience with Agentic AI architectures, multi-agent systems, LLM orchestration, tool-enabled agents, AI security, and human-in-the-loop patterns.
- Experience securing secrets, keys, and certificates and integrating observability, threat detection, monitoring, and incident response.
- Advanced Infrastructure as Code, DevSecOps, and CI/CD experience using tools such as Terraform, ARM templates, Azure DevOps, GitHub Actions, Jenkins, or GitLab CI.
- Strong technical leadership, mentoring, documentation, stakeholder management, troubleshooting, root-cause analysis, and operational-readiness skills.
- Preferred qualifications include experience with Semantic Kernel, LangChain, LangGraph, CrewAI, AutoGen, Copilot Studio, Foundry, MCP, CyberArk, Azure Key Vault, identity threat detection, Conditional Access, AI governance, and relevant Azure, identity, security, DevOps, AI/ML, automation, or ITIL certifications.
Benefits
- Hybrid work arrangement in Wrocław or Katowice with 2 days in the office and 3 days remote.
- Continuous learning, coaching, skills development, and access to a global professional network.
- Opportunities to work with global EY teams, well-known brands, and projects across multiple business disciplines.
- Diverse and inclusive culture with flexibility and support for meaningful career impact.
Tech Stack
Categories
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.