{"id":1472147,"url":"https://alion.io/job/ernst-young-ai-identity-architect","title":"AI Identity Architect","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"AI/ML","role_family":"AI/ML","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Katowice, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":77000,"max_usd":133000,"period":"year","method":"role_seniority_country_cell","sample_n":16},"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"A2A","optional":false},{"name":"AI Agents","optional":false},{"name":"AutoGen","optional":false},{"name":"Copilot Studio","optional":false},{"name":"CrewAI","optional":false},{"name":"CyberArk","optional":false},{"name":"DLP","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Multi-Agent Systems","optional":false}],"status":"live","first_seen_at":"2026-09-29T16:43:09Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-18T17:16:47Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"AI Identity Architect\nLocation: Wrocław / Katowice - 2 days in office / 3 days remote\nLet us introduce you the job offer by EY GDS Poland - a member of the global integrated service delivery center network by EY.\nAt EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.\nThe opportunity\nThe Artificial Intelligence (AI) Identity Architect will partner across technology and business teams to design and govern the integration of Agentic AI, automation and intelligence into EY’s global Identity and Access Management (IAM) ecosystem. The architect will collaborate closely with Security Architects, Development Leads, Engineering, Operations and other internal business teams to ensure that Agentic AI solutions are securely designed, complaint with IAM standards and aligned with EY’s global technology and security strategies.\nThe AI Identity Architect is accountable and responsible for the alignment of business, operational and security requirements and translation of those requirements into technical IAM capabilities. IAM services include, but not limited to, Identity Lifecycle Management, authentication and authorization, session management, access requests, access provisioning, access reauthorization, remote access, IAM services API, role and entitlement models, and directory technologies. The AI Identity Architect will work with other Architects and Service Owners to create a roadmap that meets strategic and current requirements.\nYour key responsibilities\nPartner with Architecture, Information Security, Client Technology, and Enterprise Technology teams to embed AI-driven capabilities into the enterprise IAM strategy, ensuring alignment with business goals, security policies, regulatory requirements, and organizational technology roadmaps\n\nArchitect AI-augmented solutions that enhance the global IAM platforms’ intelligence, automation and adaptive capabilities\nArchitect and integrate AI-based features, such as adaptive access control, predictive threat detection and identity analytics, into the IAM framework\nDefine architectural standards, frameworks and patterns for AI-assisted IAM services across on-prem, hybrid and cloud environments\nEstablish architectural guardrails and governance models for safe and auditable deployment of AI and Agentic agents across EY’s business teams\nDefine and enforce identity management strategies tailored for AI agents, including their unique life cycles, entitlements, and owner relationships.\nServe as a trusted advisor to senior leadership on the application of Agentic AI to identity operations, user experience and risk reduction.\nPartner with data and platform teams to ensure alignment with enterprise AI governance and model management frameworks.\nSkills and attributes for success\nThe individual in this role must be well educated in general aspects of Information Security as well as:\nHave proven experience in providing architecture guidance and advisory services to internal or external clients for various environments and systems, including application/technology blueprints, roadmaps, optimization, and migration strategies.\nExtensive experience implementing or architecting AI, ML or automation technologies within IAM or cybersecurity domains.\nExperience designing and integrating systems using the Model Context Protocol (MCP) or equivalent AI orchestration standards.\nStrong knowledge of Agentic A architectures (multi-agent systems, LLM orchestration, reinforcement-based agents or decision engines).\nStrong experience with enterprise IAM platforms (Entra ID, SailPoint, CyberArk, PlainID) and identity analytics.\nAbility to effectively communicate and advocate key security requirements and controls for implementation by development teams.\nAbility to communicate effectively with all levels of management, both verbally and in writing.\nMicrosoft Entra Agent ID and Agent 365 platform design:\nDesign the agent identity model in Microsoft Entra Agent ID agent identity blueprints, parent/child inheritance, agent instances, sponsorship and ownership, and the credential model for delegated versus application-only access.\nEstablish the Microsoft Agent 365 control plane across its five pillars Registry, Access Control, Visualization, Interoperability and Security and define the operating model for the Agent 365 registry in the Microsoft 365 admin center.\nDefine the registration and discovery pathway so that agents built in Copilot Studio, Microsoft Foundry, the Microsoft Agent Framework, the Agent 365 SDK and third-party or open-source frameworks all converge on a single authoritative registry.\nDesign Conditional Access for agents, risk-based response using Microsoft Entra ID Protection, and network-layer controls for agent traffic.\nExtend Microsoft Entra ID Governance to agent identities: access packages scoped to agent identities, access reviews, lifecycle workflows, sponsor notification and sponsorship-transfer handling, and time-bound access with automated expiry.\nDesign the delegation and consent model for agents acting on behalf of users, including token exchange, scope minimization and revocation paths.\nDefine the approach to shadow-AI discovery locally run and cloud-hosted agents surfaced through Microsoft Defender, Microsoft Intune and Agent 365 and the remediation path from discovery to governed identity.\nGuardrails, governance and assurance:\nEstablish architectural guardrails and governance models for the safe, auditable deployment of AI and agentic systems across business teams.\nDefine architectural standards, frameworks and patterns for AI-assisted IAM services across on-premises, hybrid and cloud environments.\nDesign systems and integrations using the Model Context Protocol (MCP), agent-to-agent (A2A) patterns and equivalent AI orchestration standards, with authentication, authorization and auditability designed in rather than bolted on.\nWork with Microsoft Purview and Microsoft Defender owners so that data protection, DLP, audit and threat response cover agent activity end to end.\nDefine the control set that satisfies internal policy, external regulation and audit for non-human identities, and evidence it through logging, reporting and recertification.\nSet standards for privileged agent access no standing privilege, short-lived credentials, just-in-time elevation and least-privilege scope design.\nTo qualify for the role, you must have\nEducation:\nBachelor’s or Master’s degree in Information Assurance, Computer Science, Information Systems or related field of study.\nExperience:\n12+ years of practical experience in the field of IT is required. 8+ years of direct Information Security experience.\n6+ years’ experience in hands-on Identity & Access Management positions\n2+ years of experience implementing or architecting AI/ML Identity systems\nIdeally, you’ll also have\nExperience designing or governing Agentic AI agents for workflow orchestration or decision automation.\nHands-on familiarity with Agentic AI frameworks (LamgChain, CrewAI, AutoGen or similar).\nAbility to articulate complex AI and identity concepts to non-technical stakeholders.\nWhat we offer\nEY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across nine locations - Argentina, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom - and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.\nContinuous learning: You’ll develop the mindset and skills to navigate whatever comes next.\nSuccess as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.\nTransformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.\nDiverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.\nAbout EY\nEY | Building a better working world\nEY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.\nEnabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.\nWorking across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.\nIf you can demonstrate that you meet the criteria above, please contact us as soon as possible.\nThe exceptional EY experience. It’s yours to build.\nIn compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow-up actions. Any misconduct should be reported through the EY Ethics Hotline.","description_format":"text","description_chars":9525,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Audit & Assurance Firms","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-09-29T16:43:09Z"}],"visa":[],"liveness":{"score":72,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.804,"p_room":0.9,"age_days":17,"expected_fill_days":28,"reasons":["conf:1","velocity","win:mid","comp:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/ernst-young-ai-identity-architect","json_url":"https://alion.io/job/ernst-young-ai-identity-architect.json","meta":{"generated_at":"2026-10-18T19:02:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23421,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fernst-young-ai-identity-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fernst-young-ai-identity-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fernst-young-ai-identity-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ernst-young-ai-identity-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fernst-young-ai-identity-architect"}]}