Security Engineer

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Ernst &Young

Job Description

Job Title:

Credential Protection Solution Design AI Engineer

Function:

Information Security

Scope (indicate either “global/cross-border” or “local/country”):

Global/cross-border

Sub Function:

Identity and Access Management

Job Summary:

The Information Security Engineer will be responsible for the design, implementation, operation, and security of technologies related to the protection of privileged credentials. The ideal candidate will have prior experience in developing and operating CyberArk’s Privileged Account Security Solution. The Engineer will be responsible for participating in projects to extend the capabilities of the CyberArk service along with the continued operation and maturation of the service.

The engineer will also create and enhance documentation related to configuration, standard operating procedures, workflow diagrams, and service intake forms.. We are seeking an experienced AI Solutions Engineer to design and develop intelligent agents that automate and enhance CyberArk Solution Design, onboarding, compliance validation, documentation, and operational processes. The role will focus on leveraging Generative AI, Agentic Frameworks, and enterprise automation technologies to improve efficiency, consistency, and scalability across privileged access management services.

We seek someone who is proactive and takes ownership of the service. The candidate is expected to review various sources for best practices, security information, and threat vectors in order to determine the potential impact to the environment and recommend configurations and solutions accordingly. Risk assessment techniques, scripting, linux and Windows administration, and cloud technology experience are desired

Acts as the technical owner for solution design activities, driving requirements analysis, architecture decisions, implementation planning, and continuous service improvement.

Essential Functions of the Job:

Develop and manage CyberArk’s Privileged Account Security Solution including the following:

Configure and operate CyberArk Enterprise Password Vault component and Safe design

Configure and operate CPM and PVWA components

Configure and operate High Availability and DR components

Configure and operate PSM, AAM, and CCP products

Lead solution and design reviews for privileged access onboarding initiatives.

Develop repeatable solution patterns and reference architectures for credential protection capabilities.

Create standards for credential protection integrations.

Partner with application teams to assess requirements and define privileged access onboarding strategies.

Provide technical leadership and guidance on PAM design decisions.

Design and develop AI agents for solution assessment, pattern recommendation, design document generation, compliance validation, and knowledge management.

Design, build, test, and maintain AI agents using enterprise-approved frameworks.

Develop Retrieval Augmented Generation (RAG) solutions leveraging PAM documentation and knowledge repositories.

Build workflow automation integrating ServiceNow, CyberArk, Active Directory, and cloud platforms.

Develop prompt engineering standards and AI governance controls.

Measure and report AI solution effectiveness through KPIs and adoption metrics.

Facilitate design workshops with stakeholders, translate business requirements into technical solution designs, present recommendations to senior leadership, and drive alignment across security, application, infrastructure, and operations teams.

Configure and operate Multi-factor authentication

Configure and operate LDAP, RADIUS, and SAML integration

Integrating various target platforms such as operating system, network device, service accounts, etc.

Document, report, and present on CyberArk design, performance metrics, security and operational log activity

Develop working knowledge for extended global team on all matters related to CyberArk technology

Follow ITIL process for incident and change management

Excellent English language skills, both written and verbal

Excellent interpersonal, communication, consultative and project management skills

Must be self-motivated and able to work independently, often unsupervised

Analytical/Decision Making Responsibilities:

Ability to recognize and research attacks and attack patterns

Ability to work effectively with clients, management staff members, vendors and consultants

Demonstrated creative problem-solving skills including defining and resolving issues.

Identify and escalate project risks to management.

Superior skill in organizing, managing and interpreting data and reports.

Ability to interface with cross-functional technology teams

Project planning and project leadership skills

Communicates proactively and often with counselees and team members to drive open and honest development and career conversations for the purpose of building trust, authentic meaningful relationships and exceptional career experiences.

Knowledge and Skills Requirements:

Experience with CyberArk Privileged Account Security Solution

Experience with server operating system technologies

Strong network and/or system administration background

Packet capture analysis

Strong knowledge of Active Directory

Strong knowledge of cloud technologies

Experience producing solution designs, high-level designs (HLDs), and low-level designs (LLDs).

Experience performing threat modeling and security architecture reviews.

Cloud architecture experience, preferably with Microsoft Azure.

Experience with integration architecture and API design.

Experience mapping security controls to NIST, ISO 27001, CIS, and related frameworks.

Experience with Generative AI, LLMs, Agentic Frameworks.

Familiarity with Microsoft Copilot, Azure AI.

Experience with Microsoft Copilot Studio.

Experience with scripting languages, especially PowerShell

Strong knowledge of information security concepts and technologies

Understanding of cryptography standards

Knowledgeable in all ISO and/or ISC2 defined domains of security

Strong research skills

Experience with ServiceNow IT Service Management system desired

Experience with applying industry security standards such as NIST, ISO

Developing and testing execution of disaster recovery plans

Experience with 24x7 support a plus

Demonstrated team skills and integrity in a professional environment

Exceptional social, communication, and technical and general writing skills

Supervision Responsibilities:

Applies a global mindset when leading teams, taking into consideration cultural differences, time zones and any other factors that may impede effective teaming.

Responsible for providing guidance to colleagues in global dispersed team where required through established coaching and feedback processes

Build and deploy high performance teams

Act as a visible role model

Establish process and standards for our team to follow as it pertains to service operation and continuity

Drive strategic initiatives

Demonstrate business acumen

Realize operational excellence

Support the foundations of service quality – be professional and consistent

Provide exceptional service to clients and stakeholders – be connected, responsive, and insightful

Promote and sustain effective risk management and compliance

On call with ability to work flexible schedule as needed to provide 24x7 support coverage

Job Requirements:

Education:

Bachelors or Masters Degree in Computer Science, Information Systems, Engineering or related field.

Experience:

Required qualifications

5–7+ years of IAM/PAM experience.

CyberArk design and implementation experience.

PowerShell or automation development experience.

Active Directory and cloud security experience.

Developing and maintaining privilege account management platforms, especially CyberArk

Developing and maintaining security application platforms, especially related to Identity and Access Management

Active Directory configuration, administration, and troubleshooting

Windows Server platform administration

Cloud technology configuration and administration

Scripting and writing PowerShell Cmdlets

Experience implementing AI solutions within regulated enterprise environments.

Preferred qualifications

AI solution development experience.

Enterprise architecture experience.

Microsoft Copilot Studio or Azure AI experience.

ServiceNow workflow development experience.

Certification Requirements:

MCSA, CISSP, CISM or CISA, Cyberark Certifications is a plus

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.