AI Identity Architect

Brak informacji o wynagrodzeniu

SeniorHybryda·WrocławFull-time

#467459·Dodano 2 dni temu·3

Źródło: nofluffjobs.com

Aplikuj teraz

Tech Stack / Keywords

AIMLEntra IDSailPointCyberArkPlainIDMicrosoft Entra Agent IDMicrosoft Agent 365SecurityBlueprintsIAMCybersecurity LLMSDKIntuneCloudDesign systemDLPAuditLamgChainCrewITAutoGen

Podsumowanie oferty

The AI Identity Architect will design and govern the integration of Agentic AI and automation into EY’s global Identity and Access Management (IAM) ecosystem. The role focuses on agent identity architecture, governance, and security using platforms including Microsoft Entra Agent ID, Microsoft Agent 365, and enterprise IAM systems.

Wymagania

General education in information security.
Proven experience providing architecture guidance and advisory services for varied environments and systems, including technology blueprints, roadmaps, optimization, and migration strategies.
Extensive experience implementing or architecting AI, ML, or automation technologies in IAM or cybersecurity domains.
Experience designing and integrating systems using the Model Context Protocol (MCP) or equivalent AI orchestration standards.
Strong knowledge of agentic AI architectures, including multi-agent systems, LLM orchestration, reinforcement-based agents, or decision engines.
Strong experience with enterprise IAM platforms such as Entra ID, SailPoint, CyberArk, and PlainID, and with identity analytics.
Ability to communicate and advocate security requirements and controls for development teams.
Ability to communicate effectively, verbally and in writing, with all levels of management.

Obowiązki

AI identity platform design:

Design agent identity models, identity blueprints, inheritance, ownership, sponsorship, and credential models for Microsoft Entra Agent ID.
Establish the control plane and operating model for Microsoft Agent 365, including its registry.
Define registration and discovery pathways for agents built with Copilot Studio, Microsoft Foundry, the Microsoft Agent Framework, the Agent 365 SDK, and third-party or open-source frameworks.
Design conditional access, risk-based responses using Microsoft Entra ID Protection, and network-layer controls for agent traffic.
Extend Microsoft Entra ID Governance to agent identities, including access packages, reviews, lifecycle workflows, sponsorship handling, and time-bound access.
Design delegation and consent for agents acting on behalf of users, including token exchange, scope minimization, and revocation.
Define shadow-AI discovery and remediation using Microsoft Defender, Microsoft Intune, and Agent 365.

Architecture, integration & governance:

Partner with architecture, information security, client technology, and enterprise technology teams to embed AI-driven capabilities into the enterprise IAM strategy.
Architect AI-augmented solutions and integrate AI-based features such as adaptive access control, predictive threat detection, and identity analytics into global IAM platforms.
Define architectural standards, frameworks, and patterns for AI-assisted IAM across on-premises, hybrid, and cloud environments.
Establish guardrails and governance for safe, auditable deployment of AI and agentic systems.
Design integrations using the Model Context Protocol (MCP), agent-to-agent patterns, and equivalent AI orchestration standards, with authentication, authorization, and auditability.
Work with Microsoft Purview and Microsoft Defender owners to cover data protection, DLP, audit, and threat response for agent activity.
Define and evidence controls for non-human identities through logging, reporting, and recertification; set standards for privileged agent access.
Align business, operational, and security requirements with technical IAM capabilities, and collaborate on a roadmap with other architects and service owners.
Advise senior leadership on applying agentic AI to identity operations, user experience, and risk reduction.

Benefity

Continuous learning to develop skills and the ability to navigate future challenges.
Tools and flexibility to make an impact.
Insights, coaching, and confidence-building support.

EY GDS

30 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz