{"id":2333206,"url":"https://alion.io/job/ey-security-engineer","title":"Security Engineer","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":21000,"max_usd":46000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":9},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"Azure","optional":false},{"name":"Copilot","optional":false},{"name":"Copilot Studio","optional":false},{"name":"CyberArk","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITIL","optional":false},{"name":"LDAP","optional":false},{"name":"PowerShell","optional":false},{"name":"Prompt Engineering","optional":false},{"name":"RAG","optional":false},{"name":"ServiceNow","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false}],"status":"live","first_seen_at":"2026-10-12T09:30:22Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-12T16:40:33Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.\nErnst &Young\nJob Description\nJob Title:\nCredential Protection Solution Design AI Engineer\nFunction:\nInformation Security\nScope (indicate either “global/cross-border” or “local/country”):\nGlobal/cross-border\nSub Function:\nIdentity and Access Management\nJob Summary:\nThe Information Security Engineer will be responsible for the design, implementation, operation, and security of technologies related to the protection of privileged credentials. The ideal candidate will have prior experience in developing and operating CyberArk’s Privileged Account Security Solution. The Engineer will be responsible for participating in projects to extend the capabilities of the CyberArk service along with the continued operation and maturation of the service. The engineer will also create and enhance documentation related to configuration, standard operating procedures, workflow diagrams, and service intake forms.. We are seeking an experienced AI Solutions Engineer to design and develop intelligent agents that automate and enhance CyberArk Solution Design, onboarding, compliance validation, documentation, and operational processes. The role will focus on leveraging Generative AI, Agentic Frameworks, and enterprise automation technologies to improve efficiency, consistency, and scalability across privileged access management services.\nWe seek someone who is proactive and takes ownership of the service. The candidate is expected to review various sources for best practices, security information, and threat vectors in order to determine the potential impact to the environment and recommend configurations and solutions accordingly. Risk assessment techniques, scripting, linux and Windows administration, and cloud technology experience are desired\nActs as the technical owner for solution design activities, driving requirements analysis, architecture decisions, implementation planning, and continuous service improvement.\nEssential Functions of the Job:\nDevelop and manage CyberArk’s Privileged Account Security Solution including the following:\nConfigure and operate CyberArk Enterprise Password Vault component and Safe design\nConfigure and operate CPM and PVWA components\nConfigure and operate High Availability and DR components\nConfigure and operate PSM, AAM, and CCP products\nLead solution and design reviews for privileged access onboarding initiatives.\nDevelop repeatable solution patterns and reference architectures for credential protection capabilities.\nCreate standards for credential protection integrations.\nPartner with application teams to assess requirements and define privileged access onboarding strategies.\nProvide technical leadership and guidance on PAM design decisions.\nDesign and develop AI agents for solution assessment, pattern recommendation, design document generation, compliance validation, and knowledge management.\nDesign, build, test, and maintain AI agents using enterprise-approved frameworks.\nDevelop Retrieval Augmented Generation (RAG) solutions leveraging PAM documentation and knowledge repositories.\nBuild workflow automation integrating ServiceNow, CyberArk, Active Directory, and cloud platforms.\nDevelop prompt engineering standards and AI governance controls.\nMeasure and report AI solution effectiveness through KPIs and adoption metrics.\nFacilitate design workshops with stakeholders, translate business requirements into technical solution designs, present recommendations to senior leadership, and drive alignment across security, application, infrastructure, and operations teams.\nConfigure and operate Multi-factor authentication\nConfigure and operate LDAP, RADIUS, and SAML integration\nIntegrating various target platforms such as operating system, network device, service accounts, etc.\nDocument, report, and present on CyberArk design, performance metrics, security and operational log activity\nDevelop working knowledge for extended global team on all matters related to CyberArk technology\nFollow ITIL process for incident and change management\nExcellent English language skills, both written and verbal\nExcellent interpersonal, communication, consultative and project management skills\nMust be self-motivated and able to work independently, often unsupervised\nAnalytical/Decision Making Responsibilities:\nAbility to recognize and research attacks and attack patterns\nAbility to work effectively with clients, management staff members, vendors and consultants\nDemonstrated creative problem-solving skills including defining and resolving issues.\nIdentify and escalate project risks to management.\nSuperior skill in organizing, managing and interpreting data and reports.\nAbility to interface with cross-functional technology teams\nProject planning and project leadership skills\nCommunicates proactively and often with counselees and team members to drive open and honest development and career conversations for the purpose of building trust, authentic meaningful relationships and exceptional career experiences.\nKnowledge and Skills Requirements:\nExperience with CyberArk Privileged Account Security Solution\nExperience with server operating system technologies\nStrong network and/or system administration background\nPacket capture analysis\nStrong knowledge of Active Directory\nStrong knowledge of cloud technologies\nExperience producing solution designs, high-level designs (HLDs), and low-level designs (LLDs).\nExperience performing threat modeling and security architecture reviews.\nCloud architecture experience, preferably with Microsoft Azure.\nExperience with integration architecture and API design.\nExperience mapping security controls to NIST, ISO 27001, CIS, and related frameworks.\nExperience with Generative AI, LLMs, Agentic Frameworks.\nFamiliarity with Microsoft Copilot, Azure AI.\nExperience with Microsoft Copilot Studio.\nExperience with scripting languages, especially PowerShell\nStrong knowledge of information security concepts and technologies\nUnderstanding of cryptography standards\nKnowledgeable in all ISO and/or ISC2 defined domains of security\nStrong research skills\nExperience with ServiceNow IT Service Management system desired\nExperience with applying industry security standards such as NIST, ISO\nDeveloping and testing execution of disaster recovery plans\nExperience with 24x7 support a plus\nDemonstrated team skills and integrity in a professional environment\nExceptional social, communication, and technical and general writing skills\nSupervision Responsibilities:\nApplies a global mindset when leading teams, taking into consideration cultural differences, time zones and any other factors that may impede effective teaming.\nResponsible for providing guidance to colleagues in global dispersed team where required through established coaching and feedback processes\nBuild and deploy high performance teams\nAct as a visible role model\nEstablish process and standards for our team to follow as it pertains to service operation and continuity\nDrive strategic initiatives\nDemonstrate business acumen\nRealize operational excellence\nSupport the foundations of service quality - be professional and consistent\nProvide exceptional service to clients and stakeholders - be connected, responsive, and insightful\nPromote and sustain effective risk management and compliance\nOn call with ability to work flexible schedule as needed to provide 24x7 support coverage\nJob Requirements:\nEducation:\nBachelors or Masters Degree in Computer Science, Information Systems, Engineering or related field.\nExperience:\nRequired qualifications\n5-7+ years of IAM/PAM experience.\nCyberArk design and implementation experience.\nPowerShell or automation development experience.\nActive Directory and cloud security experience.\nDeveloping and maintaining privilege account management platforms, especially CyberArk\nDeveloping and maintaining security application platforms, especially related to Identity and Access Management\nActive Directory configuration, administration, and troubleshooting\nWindows Server platform administration\nCloud technology configuration and administration\nScripting and writing PowerShell Cmdlets\nExperience implementing AI solutions within regulated enterprise environments.\nPreferred qualifications\nAI solution development experience.\nEnterprise architecture experience.\nMicrosoft Copilot Studio or Azure AI experience.\nServiceNow workflow development experience.\nCertification Requirements:\nMCSA, CISSP, CISM or CISA, Cyberark Certifications is a plus\nEY | Building a better working world\nEY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.\nEnabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.\nWorking across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.","description_format":"text","description_chars":9315,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Audit & Assurance Firms","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-10-12T09:30:22Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":22,"reasons":["conf:3","win:early","comp:brand"],"computed_at":"2026-10-12T20:35:18Z"},"pay":null,"html_url":"https://alion.io/job/ey-security-engineer","json_url":"https://alion.io/job/ey-security-engineer.json","meta":{"generated_at":"2026-10-12T20:35:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33429,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fey-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fey-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fey-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ey-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fey-security-engineer"}]}