USI- Cyber- DT&P-Identity - AI Security Analyst

Deloitte Development LLC; Bengaluru; Vor Ort; INR 1.800.000 - 2.400.000; Vollzeit

Zusammenfassung

Deloitte Cyber’s Identity team seeks a Security Engineer II to secure AI agents, workloads, and users across enterprise and cloud environments. You will document identity flows, configure service principals, and implement robust access controls in collaboration with architects and engineers.

Location options include Hyderabad, Bengaluru, Chennai, and Pune, with a focus on production delivery and client-facing engagements.

Qualifikationen

• Bachelor’s degree in CS/Engineering/IT/Cybersecurity or equivalent experience
• 2+ years in cybersecurity and AI engineering with production work
• Experience deploying or securing at least one production AI/RAG/agentic workload
• Experience with at least one major cloud platform (AWS/Azure/GCP) and identity security in cloud
• Experience securing service accounts, service principals, managed identities, secrets, credentials lifecycle
• Experience implementing OAuth 2.0/2.1, OpenID Connect, SAML, JWT, PKI, or mTLS
• Experience building identity integrations or automation with Python/TypeScript/Java/Go, REST APIs, JSON/YAML, and Git

Aufgaben

• Gather requirements and document identity flows, trust boundaries, permissions, and dependencies across users, agents, models, tools, and data sources.
• Configure and integrate agent identities, service principals, managed identities, workload federation, secrets, and short‑lived credentials across AI and enterprise environments.
• Implement authentication and authorization controls using OAuth 2.0/2.1, OpenID Connect, token exchange, RBAC, and policy-based access control.
• Build automation for identity onboarding, access assignment, credential rotation, access review, and deprovisioning; troubleshoot token, consent, and policy issues using platform logs.
• Document configurations, test results, and operating procedures, and support client delivery through handoff activities, reusable patterns, prototypes, and demonstrations.

Kenntnisse

IAM fundamentals

OAuth / OIDC

SAML / JWT

REST APIs

AWS / Azure / GCP

Identity security

Agent identities

Security engineering

Programming (Python/TypeScript/Java/Go

Ausbildung

Bachelor’s degree in CS/Engineering/IT/Cybersecurity

Tools

Git

Cloud platforms (AWS/Azure/GCP)

Jobbeschreibung

As a Security Engineer II specializing in Identity within Deloitte Cyber’s Cyber for AI practice, you will help clients secure how AI agents, workloads, and users authenticate, receive permissions, and access enterprise tools and data. You will work with architects and engineers to assess current-state controls, implement target-state capabilities, and test production solutions. This role combines client collaboration with hands‑on technical delivery across enterprise and cloud environments.

Work you'll do

As a Security Engineer II on the Identity team, you will be responsible for:

• Gather requirements and document identity flows, trust boundaries, permissions, and dependencies across users, agents, models, tools, and data sources.
• Configure and integrate agent identities, service principals, managed identities, workload federation, secrets, and short‑lived credentials across AI and enterprise environments.
• Implement authentication and authorization controls using standards and patterns such as OAuth, OpenID Connect, token exchange, role‑based access control, and policy‑based access control.
• Build automation for identity onboarding, access assignment, credential rotation, access review, and deprovisioning, and troubleshoot token, consent, and policy issues using platform and application logs.
• Document configurations, test results, and operating procedures, and support client delivery through handoff activities, reusable patterns, prototypes, and demonstrations.

The team

Deloitte Cyber's Cyber for AI practice helps organizations secure generative AI and agentic systems from design through production. The team brings together AI engineering and cyber skills across identity, data, infrastructure, application security and operations.

We work with clients to make security controls part of the platform and delivery lifecycle, so teams can move from experiments to production without creating unmanaged access, data or infrastructure risk.

Within the practice, the Identity capability focuses on how agents, workloads and people are identified, authenticated, authorized and governed across enterprise and cloud environments.

Location: Hyderabad / Bengaluru / Chennai / Pune

Qualifications

Required:

• Bachelor’s degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field; alternatively, equivalent demonstrated experience
• 2+ years of experience in cybersecurity and AI engineering, including production work in both domains
• Experience deploying or securing at least 1 production generative AI, retrieval-augmented generation (RAG), or agentic workload using a managed service or self-hosted stack
• Experience with at least 1 major cloud platform, including Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP), and identity security patterns in cloud environments
• Experience securing workload or non-human identities, including service accounts, service principals, managed identities, federation, secrets, or credential lifecycle controls
• Experience implementing authentication and authorization using OAuth 2.0 or 2.1, OpenID Connect, Security Assertion Markup Language (SAML), System for Cross-domain Identity Management (SCIM), JSON Web Tokens (JWT), token exchange, public key infrastructure (PKI), or mutual Transport Layer Security (mTLS)
• Experience building identity integrations or automation using Python, TypeScript, Java, Go, or a comparable language, together with Representational State Transfer (REST) application programming interfaces (APIs), JSON or YAML, and Git

Preferred:

• Experience in consulting, client delivery, or customer-facing engineering roles
• Experience with both managed AI services and self-hosted or open-weight AI platforms
• Experience with AI threat modeling, red teaming, security evaluations, secure AI development practices, or AI-specific monitoring
• Experience with machine learning lifecycle tools or frameworks such as PyTorch, TensorFlow, or MLflow
• Experience with agent-focused identity capabilities such as Microsoft Entra Agent ID, Model Context Protocol authorization, or comparable emerging identity patterns
• Experience with policy engines, identity graphs, or authorization platforms such as Open Policy Agent, Cedar, OpenFGA, or Neo4j

#Cyber_Digital Trust & Privacy

#CA-TD