AI Engineer - Identity and Access Management & Cybersecurity

Job description

GDS Cyber-AI Driven IAM-Staff At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. EY-Cyber Security- Staff AI Engineer -- IAM \& Cybersecurity At EY, we're all in to shape your future with confidence. We'll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. About Global Delivery Services Global Delivery Services refers to EY's worldwide network of service delivery centers. The GDS team plays an important role in EY's strategy by ensuring effective support to EY's growth agenda. Our journey started in 2002 with approximately 200 people. Today we stand at 80,000 professionals in ten locations around the world. We operate in Argentina, China, Hungary, India, Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom. Client service is focused on providing Consulting, Assurance, Tax, Strategy \& Transactions, and Knowledge support to our clients around the world. The teams enable account teams worldwide to provide seamless, high-quality, value-added support, helping deliver exceptional client service. Enablement Services provides cost-effective, high-skilled, and innovative services to support EY's global and local enablement teams. Markets, BMC, AWS, Finance and Accounting, Risk Management, Procurement, People Shared Services, IT Service Delivery and IT Global Infrastructure services, are among the services offered by Enablement Services. Our innovation specialists serve the GDS Client Service and Enablement Services teams, along with Service Lines, Core Business Services and Sectors. The team brings the desired environment, technologies and skilled teams together for facilitation, rapid prototyping and innovative thinking. The competencies offered include analytics, digital, user experience, mobile technology, infrastructure, Microsoft technologies and open innovation. The Opportunity EY Global Delivery Services (GDS) is seeking a high-performing Staff AI Engineer with 2--4 years of experience to design, develop and support AI-driven automation solutions for enterprise and client environments within the Identity and Access Management domain. This role focuses on hands-on engineering, building scalable AI-powered workflows and accelerating IAM delivery through intelligent automation and generative AI capabilities. You will work closely with cross-functional teams to implement practical AI use cases across identity lifecycle, access governance, access operations, risk insights and enterprise security workflows using modern AI tooling, LLM frameworks and automation platforms. The ideal candidate combines strong software engineering fundamentals with hands-on knowledge of generative AI, automation frameworks and secure development practices, along with a basic understanding of IAM and Cybersecurity concepts. The candidate should be able to translate business and identity-related needs into scalable AI-enabled solutions. Your Key Responsibilities Develop AI-enabled scripts, prototypes, copilots, workflows and automation assets for IAM and Cybersecurity use cases under guidance from senior engineers and architects. Work hands-on with Python, PowerShell, LLM/SLM APIs, embeddings, RAG, LangChain, LangGraph, MCP, ADKs and AI orchestration concepts to build practical AI solutions. Support use cases across SSO, MFA, Conditional Access, IGA, PAM, Active Directory, Microsoft Entra ID and Non-Human Identity domains. Assist in building AI workflows for access requests, access reviews, certification campaigns, provisioning, privileged access, identity analytics and remediation activities. Analyze identity, access, privilege, directory, vault, activity and security logs to identify patterns, anomalies, access risks and automation opportunities. Support integrations or data extraction from SailPoint, Saviynt, CyberArk, Microsoft Entra ID, Active Directory, Azure, AWS, Microsoft Graph API, SIEM/SOAR, Splunk, Microsoft Sentinel, Microsoft Defender, CrowdStrike and XDR platforms. Apply basic ML, classification, NLP, pattern recognition, anomaly detection, UEBA and predictive risk scoring concepts to identity and cyber data. Contribute to Non-Human Identity use cases including service accounts, managed identities, service principals, enterprise applications, API-based identities, workload identities and agent identities. Prepare dashboards, reports and simple insights using Power BI, Tableau or identity analytics views to explain access risk, compliance posture and user activity trends. Collaborate with IAM, Cyber, cloud and business teams to understand requirements, document findings and demonstrate working prototypes or proof-of-concepts. QUALIFICATIONS: Required Skills 2--4 years of hands-on experience in AI engineering, software development, automation, data analytics, cybersecurity analytics or IAM technology support. Hands-on experience building AI applications, scripts or prototypes using Python, PowerShell, LLM/SLM APIs, embeddings, RAG, prompt engineering, AI agents, copilots or workflow automation. Practical exposure to LangChain, LangGraph, MCP, ADKs, AI orchestration engines, Azure AI, OpenAI, AWS or Python-based AI/ML frameworks. Good understanding of ML, classification, optimization, NLP, pattern recognition, time series analysis, anomaly detection, UEBA and predictive risk scoring concepts. Working or theoretical knowledge of IAM concepts including SSO, MFA, Conditional Access, SAML, OAuth, OIDC with PKCE, authentication, authorization, federation, certificate management and key management. Working or theoretical knowledge of IGA concepts and tools such as SailPoint, Saviyn