Delivery Senior Consultant, Software Engineering Solutions, Identity & Gen AI Engineer

Deloitte is seeking a Delivery Senior Consultant to drive Identity and Gen AI engineering initiatives, building and securing AI solutions that enforce identity, access, and trust across both human and non-human identities and GenAI platforms. This hands-on role blends active engineering, system integration, and ongoing refinement to help clients deploy responsible AI at scale.

Responsibilities

• Design, build, and integrate generative AI capabilities such as large language model applications, retrieval-augmented generation, and AI agents, ensuring secure data access and seamless connectivity to downstream systems.
• Implement authentication, authorization, and identity controls for AI agents, service accounts, and other non-human identities operating within enterprise and cloud environments.
• Establish guardrails for agentic workflows, applying scoped permissions, least-privilege access, credential and secrets management, and runtime policy enforcement.
• Set up comprehensive logging, monitoring, and governance to provide traceability and accountability for AI system actions.
• Collaborate with IAM, security architecture, and data teams to embed identity controls into GenAI solution delivery and day-to-day operations.
• Create and maintain reference architectures, reusable patterns, and thorough technical documentation for building and securing AI systems.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field.
• Ability to work onsite up to five days per week.
• At least 3 years of software engineering experience with Python or an equivalent language.
• Over one year of hands-on experience building, integrating, or deploying generative AI solutions such as LLM applications, retrieval-augmented generation, or AI agents, including use of model APIs, orchestration frameworks, and tools like Claude Code, OpenAI Codex, GitHub Copilot, or Cursor.
• Working knowledge of identity and access management concepts and protocols, including authentication, authorization, single sign-on, and standards such as OpenID Connect, SAML, OAuth, and JWT.
• Ability to travel about 15 percent on average, depending on client engagements and project needs.
• Eligibility to obtain and maintain the necessary security clearance.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or in the future.
• Hybrid delivery model requiring residence within a commutable distance to a Deloitte Delivery Center or Geo-Hub location in the United States (examples include Gilbert, Lake Mary, Mechanicsburg, Atlanta, Charlotte, Dallas, Houston, and Philadelphia).
• Co-location expectation up to 30 percent of working time for orchestrated opportunities, including projects, training, and Moments That Matter at a Deloitte Delivery Center location, Geo-Hub location, approved site, or project site.
• Maximum of 10 percent overnight travel for client or project purposes.
• If relocation is necessary, the move must be completed within 12 weeks from the start date to reside within a commutable distance.

Technologies

• Python
• Claude Code, OpenAI Codex
• GitHub Copilot, Cursor
• LangChain, LangGraph
• Model Context Protocol, Open Policy Agent
• Cedar, OpenFGA
• HashiCorp Vault, CyberArk, SailPoint, Okta, Microsoft Entra ID
• AWS, Microsoft Azure
• Terraform, Ansible
• OpenID Connect, SAML, OAuth, JWT