Build and integrate generative AI solutions, including large language model applications, retrieval-augmented generation, and AI agents, with secure access to data and downstream systems.
Engineer authentication, authorization, and identity controls for AI agents, service accounts, and other non-human identities operating across enterprise and cloud environments.
Develop guardrails for agentic workflows, including scoped permissions, least-privilege access, credential and secrets management, and runtime policy enforcement.
Implement logging, monitoring, and governance that provide traceability and accountability for AI system actions.
Collaborate with IAM, security architecture, and data teams to embed identity controls into GenAI solution delivery and operations.
Create and maintain reference architectures, reusable patterns, and technical documentation for building and securing AI systems.

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field
Ability to work onsite up to five days a week
3+ years of software engineering experience with Python or a comparable language
1+ year of hands-on experience building, integrating, or deploying generative AI solutions such as LLM applications, retrieval-augmented generation, or AI agents, including use of model APIs, orchestration frameworks, and AI development tools such as Claude Code, OpenAI Codex, GitHub Copilot, or Cursor
Working knowledge of identity and access management concepts and protocols, including authentication, authorization, single sign-on, and standards such as OpenID Connect, SAML, OAuth, and JWT
Ability to travel 15% on average, based on the work and client needs
Ability to obtain and maintain the necessary security clearance
Legally authorized to work in the United States without the need for employer sponsorship now or in the future
Hybrid work model requiring residence within a commutable distance to a Deloitte Delivery Center location (Gilbert, Lake Mary, Mechanicsburg) or Geo-Hub locations (Atlanta, Charlotte, Dallas, Houston, Philadelphia); up to 30% time co-located
Travel up to 10% overnight for client or project purposes
If relocation is necessary, complete the move within 12 weeks from the start date

Delivery Senior Consultant, Software Engineering Solutions, Identity & Gen AI Engineer

Job Description