Delivery Senior Consultant, Software Engineering Solutions, Identity & Gen AI Engineer

Deloitte offers a path into a proactive Cyber team focused on engineering secure generative AI solutions with strong identity, access, and trust controls. This hybrid role in Philadelphia places you alongside IAM, security architecture, and data teams to embed identity into GenAI delivery and operations. Our Deloitte Cyber team helps clients operate with resilience and manage risk through reference architectures, reusable patterns, and clear governance, supporting growth with confidence.

Responsibilities

• Build and integrate generative AI solutions, including LLM applications, retrieval-augmented generation, and AI agents, with secure data and downstream system access.
• Design authentication, authorization, and identity controls for AI agents, service accounts, and other non-human identities across enterprise and cloud environments.
• Create guardrails for agentic workflows, applying scoped permissions, least-privilege access, credential and secrets management, and runtime policy enforcement.
• Establish logging, monitoring, and governance to provide traceability and accountability for AI system actions.
• Collaborate with IAM, security architecture, and data teams to embed identity controls into GenAI solution delivery and operations.
• Develop and maintain reference architectures, reusable patterns, and technical documentation for building and securing AI systems.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field
• Ability to work onsite up to five days a week
• 3+ years of software engineering experience with Python or a comparable language
• 1+ year of hands-on experience building, integrating, or deploying generative AI solutions such as large language model applications, retrieval-augmented generation, or AI agents, including use of model APIs, orchestration frameworks, and AI development tools such as Claude Code, OpenAI Codex, GitHub Copilot, or Cursor
• Working knowledge of identity and access management concepts and protocols, including authentication, authorization, single sign-on, and standards such as OpenID Connect, SAML, OAuth, and JSON Web Token
• Ability to travel 15% on average, depending on client engagements
• Ability to obtain and maintain the necessary security clearance
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
• Delivery Center Location & Travel Requirements:
  • Hybrid work model requiring residence within a commutable distance to one of the US Delivery Center locations (Gilbert, Lake Mary, Mechanicsburg) or Geo-Hub locations (Atlanta, Charlotte, Dallas, Houston, Philadelphia)
  • Co-location up to 30% of working time at an assigned office for orchestrated opportunities, including projects, training, and Moments That Matter
  • Travel up to 10% overnight for client or project purposes
  • Relocation, if necessary, to be completed within 12 weeks from the start date to reside within a commutable distance
• Preferred:
• Experience deploying generative AI solutions to production environments
• Hands-on experience with identity and access management platforms such as SailPoint, Okta, or Microsoft Entra ID
• Experience securing non-human identities, service accounts, secrets, and credentials using HashiCorp Vault or CyberArk
• Experience with AI agent frameworks and protocols such as LangChain, LangGraph, or Model Context Protocol
• Experience with fine-grained authorization or policy-as-code using Open Policy Agent, Cedar, or OpenFGA
• Familiarity with AI security risks, including OWASP Top 10 for LLM Applications, prompt injection, and excessive agency
• Experience applying AI governance and risk frameworks such as the NIST AI RMF
• 2+ years of building or deploying workloads in AWS and Microsoft Azure
• Certifications such as CISSP, CCSP, or cloud-focused credentials (e.g., AWS Solutions Architect, Azure Solutions Architect)
• 1+ year of experience supporting federal government environments
• 1+ year of experience with infrastructure-as-code or automation technologies such as Terraform or Ansible