Delivery Senior Consultant, Software Engineering Solutions, Identity & Gen AI Engineer

Role focused on securing GenAI deployments through identity, access controls, and governance across enterprise ecosystems.

Responsibilities

• Design and integrate GenAI capabilities, including LLM applications, retrieval augmented generation workflows, and AI agents, with secure data access and smooth integration to downstream systems.
• Develop authentication, authorization, and identity controls for AI agents, service accounts, and other non-human identities operating across on premise and cloud environments.
• Create guardrails for agent driven workflows, including scoped permissions, least privilege access, secrets management, and runtime policy enforcement.
• Establish comprehensive logging, monitoring, and governance to ensure traceability and accountability of AI system actions.
• Collaborate with IAM, security architecture, and data teams to embed identity controls into GenAI solution delivery and operations.
• Develop and maintain reference architectures, reusable patterns, and technical documentation for building and securing AI systems.

Requirements

• Bachelor's degree in cybersecurity, computer science, information systems, engineering, or a closely related technical field.
• Willingness to work onsite up to five days per week.
• Minimum 3+ years of software engineering experience with Python or a comparable language.
• At least 1+ year of hands on experience building, integrating, or deploying generative AI solutions such as LLM applications, RAG, or AI agents, including use of model APIs, orchestration frameworks, and tools such as Claude Code, OpenAI Codex, GitHub Copilot, or Cursor.
• Solid knowledge of identity and access management concepts and protocols, including authentication, authorization, SSO, and standards such as OIDC, SAML, OAuth, and JWT.
• Ability to travel on average 15% based on client engagements.
• Ability to obtain and maintain the necessary security clearance.
• legally authorized to work in the United States without employer sponsorship now or in the future.
• Hybrid work model requiring residence within a commutable distance to one of the US Delivery Center locations (Gilbert, Lake Mary, Mechanicsburg) or Geo-Hub locations (Atlanta, Charlotte, Dallas, Houston, Philadelphia).
• Up to 30% of working time may be co located at an assigned office for opportunities such as projects, training, and practice sessions at Deloitte Delivery Centers, Geo Hub locations, approved sites, or project locations.
• Up to 10% overnight travel for client or project purposes.
• If relocation is necessary, complete the move within 12 weeks to reside within a commutable distance.

Technologies

• Python
• Claude Code
• OpenAI Codex
• GitHub Copilot
• Cursor
• LangChain
• LangGraph
• Model Context Protocol (MCP)
• Open Policy Agent (OPA)
• Cedar
• OpenFGA
• HashiCorp Vault
• CyberArk
• SailPoint
• Okta
• Microsoft Entra ID
• AWS
• Microsoft Azure
• Terraform
• Ansible
• OIDC
• SAML
• OAuth
• JWT
• Retrieval augmented generation (RAG)
• Large language model (LLM)