Cyber Senior Consultant: AI Security, Identity

Deloitte • Jersey City, NJ

5d • $105,400 - $207,800

About The Position

As a Senior Consultant on Deloitte’s Cyber for AI Identity team, you will lead technical workstreams focused on securing AI agents and workloads, including how users and workloads authenticate, receive permissions, and access enterprise tools and data. The role combines client advisory with hands-on engineering to design architectures, integrations, and production controls. You will guide junior practitioners, lead technical demonstrations, and contribute to delivery estimates and pursuit work.

Deloitte’s Cyber for AI team helps organizations secure generative AI and agentic systems by embedding security controls in platforms and delivery lifecycles. The Identity capability addresses how agents, workloads, and people are identified, authenticated, authorized, and governed across enterprise and cloud environments, while managing access, data, and infrastructure risk. Recruiting for this role ends on 05/31/2027. The position may require travel averaging 20–50%, depending on assignments, clients, and industries served. The estimated salary range is $105,400–$207,800, and the role may also be eligible for a discretionary annual incentive program.

Requirements

• 3–5+ years of cybersecurity experience, including at least 1 year of AI security engineering experience.
• Production experience designing, integrating, and securing generative AI, RAG, or agentic workloads with model, tool, and enterprise data connections.
• Experience designing and implementing identity controls for service accounts and principals, managed identities, workload federation, secrets, and short-lived credentials for at least one public cloud platform.
• Experience implementing OAuth 2.0 or 2.1, OpenID Connect, SAML, SCIM, JWT, token exchange, PKI, and mTLS, including delegated and on-behalf-of access patterns.
• Implementation experience with identity, identity governance, privileged access, cloud IAM, and secrets-management platforms, such as Microsoft Entra, AWS IAM/STS, Google Cloud IAM, Okta, Ping, SailPoint, Saviynt, CyberArk, or HashiCorp Vault.
• Experience building or reviewing identity integrations or automation using Python, TypeScript, Java, and/or Go, APIs, JSON or YAML, Git, and CI/CD practices.
• Bachelor’s degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field; equivalent demonstrated experience is an alternative.
• Ability to travel 20–50% on average, depending on work, clients, and industries served.
• Ability to work independently and collaboratively as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment.
• Strong interpersonal skills and a professional demeanor.
• Ability to meet deadlines.
• Ability to provide clear guidance to others.

Nice To Haves

• Previous consulting, client delivery, or customer-facing engineering experience, including developing reusable technical assets, guiding junior engineers, or contributing to engineering standards.
• Experience across managed AI services and self-hosted or open-weight AI platforms.
• Experience with AI threat modeling, red teaming, security evaluations, secure AI development practices, or AI-specific monitoring.
• Experience with machine learning tools or frameworks such as PyTorch, TensorFlow, or MLflow.
• Experience with agent-focused identity capabilities, including Microsoft Entra Agent ID or Model Context Protocol (MCP) authorization, or with policy engines, identity graphs, or authorization platforms such as Open Policy Agent (OPA), Cedar, OpenFGA, or Neo4j.
• Preferred certifications: CISSP; CCSP; cloud certifications from Azure, AWS, or Google Cloud; identity certifications from Okta, Ping, SailPoint, Saviynt, or CyberArk.

Responsibilities

• Lead discovery sessions to map user-to-agent-to-tool access paths, privilege boundaries, and identity lifecycle requirements.
• Design identity architectures and integrations for AI agents and workloads, including federation, credentialless access, delegated authorization, policy enforcement, and connections across cloud and enterprise platforms.
• Engineer and review token exchange, on-behalf-of access, consent, session controls, and just-in-time privilege patterns; test production controls and resolve authentication and authorization issues.
• Own identity workstreams, manage dependencies and delivery milestones, and guide consultants.
• Lead technical demonstrations and prototypes and contribute architecture, effort, and estimation inputs to pursuits.

Benefits

• Broad range of employee benefits (specific benefits are not listed).
• May be eligible to participate in a discretionary annual incentive program.
• Professional development opportunities, including on-the-job learning, formal development programs, mentorship, and leadership opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior