deloitteBaltimore, MD
Cyber Senior Consultant: AI Security, Identity
Cyber Senior Consultant: AI Security, Identity
Computer Systems Design ServicesOther Scientific and Technical Consulting ServicesCustom Computer Programming Services
Apply for this role (opens in a new tab)Overview:
As a Sr. Consultant: AI Security, Identity, you guide secure AI workstreams for agents and workloads, blending advisory and hands-on engineering. You design identity architectures, automate access controls, and validate production security measures across cloud and enterprise platforms. You will mentor junior practitioners, demonstrate solutions, and contribute to pursuit efforts. This role supports Deloitte’s Cyber for AI mission to secure generative AI and agentic systems.
Responsibilities:
Lead discovery sessions mapping user-to-agent-to-tool access paths and identity lifecycle requirements Design identity architectures and integrations for AI agents and workloads ( federation, credentialless access, delegated authorization, policy enforcement) Engineer and review token exchange, on-behalf-of access, consent, session controls, and just-in-time privilege patterns; test production controls Own identity workstreams, manage dependencies and delivery milestones, and guide consultants Lead technical demonstrations and prototypes; contribute architecture, estimation inputs to pursuits
Key requirements:
3-5+ years of cybersecurity experience with at least 1 year in AI security engineering Production experience designing, integrating, and securing generative AI, RAG, or agentic workloads with model/tool/enterprise data connections Designing and implementing identity controls for service accounts, managed identities, workload federation, secrets, and short-lived credentials across one or more public clouds Experience with OAuth 2.0/2.1, OpenID Connect, SAML, SCIM, JWT, token exchange, PKI, mTLS; delegated and on-behalf-of patterns Experience with identity governance, privileged access, cloud IAM, and secrets-management platforms (e.g., MS Entra, AWS IAM/STS, Google Cloud IAM, Okta, Ping, SailPoint, Saviynt, CyberArk, HashiCorp Vault) Programming experience for identity integrations or automation (Python, TypeScript, Java, Go) with APIs, JSON/YAML; Git and CI/CD Bachelor’s degree in related field or equivalent experience Willingness to travel 20–50% Limited immigration sponsorship may be available Independent work ethic and strong collaboration Effective written and verbal communication Meticulous attention to detail and quality OAuth 2.0/2.1, OpenID Connect, SAML, SCIM, JWT, token exchange, PKI, mTLS Identity, identity governance, privileged access, cloud IAM, secrets-management platforms Cloud providers (Azure, AWS, Google Cloud) IAM implementations
Also on the board Same function, level within a rung
Level
Senior
Location
Baltimore, MD
Occupation
Information Security Engineers
Industry
Computer Systems Design Services
Posted
today