Delivery Senior Consultant, Software Engineering Solutions, Identity & Gen AI Engineer

The Delivery Senior Consultant focuses on identity, access, and trust within generative AI deployments, delivering hands-on software engineering, integration, and governance for GenAI platforms across enterprise systems. The role blends secure development with IAM and security collaboration to enable scalable, compliant AI solutions.

Responsibilities

• Design and integrate generative AI solutions, including LLM applications, retrieval-augmented generation workflows, and AI agents, with secure access to data and downstream systems.
• Engineer authentication, authorization, and identity controls for AI agents, service accounts, and other non-human identities across enterprise and cloud environments.
• Implement guardrails for agentic workflows, covering scoped permissions, least-privilege access, credential and secrets management, and runtime policy enforcement.
• Establish logging, monitoring, and governance to ensure traceability and accountability for AI system actions.
• Collaborate with IAM, security architecture, and data teams to embed identity controls into GenAI solution delivery and operations.
• Create and maintain reference architectures, reusable patterns, and technical documentation to guide the building and securing of AI systems.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field
• Ability to work onsite up to five days per week
• 3+ years of software engineering experience with Python or a comparable language
• 1+ year of hands-on experience building, integrating, or deploying generative AI solutions such as large language model applications, retrieval-augmented generation, or AI agents, including use of model APIs, orchestration frameworks, and AI development tools such as Claude Code, OpenAI Codex, GitHub Copilot, or Cursor
• Working knowledge of identity and access management concepts and protocols, including authentication, authorization, single sign-on, and standards such as OpenID Connect, SAML, OAuth, and JWT
• Ability to travel 15 percent, on average, based on the work and clients served
• Ability to obtain and maintain the necessary security clearance
• Legally authorized to work in the United States without employer sponsorship, now or in the future

Delivery Center Location, Travel, and Relocation

• Hybrid work model requiring residence within a commutable distance to one of the US Delivery Center locations (Gilbert, Lake Mary, Mechanicsburg) or Geo-Hub locations (Atlanta, Charlotte, Dallas, Houston, Philadelphia)
• Co-location up to 30 percent of working time at an assigned office for orchestrated opportunities, including projects, practice sessions, training, and related activities at Deloitte Delivery Center locations, Geo-Hub locations, approved sites, or project locations
• Travel requirement: Maximum of 10 percent overnight travel for client or project purposes
• Relocation: If necessary, complete the move within 12 weeks from the start date to reside within a commutable distance

Technologies

• Python
• Claude Code
• OpenAI Codex
• GitHub Copilot
• Cursor
• LangChain
• LangGraph
• Model Context Protocol
• Open Policy Agent
• Cedar
• OpenFGA
• HashiCorp Vault
• CyberArk
• SailPoint
• Okta
• Microsoft Entra ID
• AWS
• Microsoft Azure
• Terraform
• Ansible
• OpenID Connect
• SAML
• OAuth
• JWT
• Retrieval-augmented generation
• Large language model