EYTC-CS-IAM- AI Architect-Manager
About this role
The Opportunity
EY GDS Cybersecurity is seeking an AI-experienced IAM professional to lead and scale AI initiatives within the Identity and Access Management (IAM) practice. The role will drive architectural strategy for LLM-driven intelligence, Retrieval Augmented Generation (RAG), agentic automation, and AI-enabled orchestration across IAM ecosystems such as SailPoint, Saviynt, Okta, Azure AD, and CyberArk.
Key Responsibilities
- Architect multi-cloud AI solutions leveraging Azure AI, Azure OpenAI, AWS Bedrock, serverless components, microservices, and AI agents
- Design end-to-end AI-enabled IAM workflows integrating identity data, LLMs, RAG pipelines, vector databases, and IAM toolchains
- Lead Python-based microservices development (FastAPI/Flask) for IAM automation and API-driven integrations
- Design AI orchestration using LangChain, LangGraph, AutoGen, LlamaIndex, and Semantic Kernel
- Build autonomous multi-agent systems with reasoning and decision intelligence
- Lead client workshops, PoCs, MVPs, and presales demonstrations
Skills and Attributes for Success
Required Skills:
- 7+ years of experience in AI architecture, intelligent automation, or advanced analytics
- Expertise in LLMs, RAG, agentic AI, and multi-cloud AI architectures (Azure/AWS)
- Strong Python hands-on skills and API integration experience
- Strong understanding of microservices, REST/SCIM integrations, and secure solution design
- Good understanding of IAM fundamentals (identity lifecycle, governance, provisioning)
Preferred Skills:
- Consulting and client advisory experience
- Experience leading PoCs, MVPs, and enterprise implementations
- Strong presentation and stakeholder engagement skills
What We Offer You
Continuous learning, exposure to cutting-edge AI and cybersecurity initiatives, a flexible and inclusive workplace, competitive benefits, and the opportunity to shape the future of intelligent identity solutions.
Our Commitment
EY is committed to building an equitable and inclusive workplace and is an equal opportunity employer.
EY | Building a better working world
EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
Apply now » Apply now- Start applying with LinkedIn
- Apply Now Start
-
Please wait...
- Connect with us
- Our locations
- My EY
- Site map
- Legal and privacy
- Labor condition applications
- Cookie Consent Manager
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.
×Cookie Consent Manager
When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.
Required Cookies
These cookies are required to use this website and can't be turned off.
Required Cookies Show More Details Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function:- "route" is used for session stickiness
- "careerSiteCompanyId" is used to send the request to the correct data center
- "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor
- "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another