Security Engineer

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. 

Ernst &Young

Job Description

Job Title:

Credential Protection Solution Design AI Engineer

Function:

Information Security

Scope (indicate either “global/cross-border” or “local/country”):

Global/cross-border

Sub Function:

Identity and Access Management

Job Summary:

The Information Security Engineer will be responsible for the design, implementation, operation, and security of technologies related to the protection of privileged credentials. The ideal candidate will have prior experience in developing and operating CyberArk’s Privileged Account Security Solution. The Engineer will be responsible for participating in projects to extend the capabilities of the CyberArk service along with the continued operation and maturation of the service. The engineer will also create and enhance documentation related to configuration, standard operating procedures, workflow diagrams, and service intake forms.. We are seeking an experienced AI Solutions Engineer to design and develop intelligent agents that automate and enhance CyberArk Solution Design, onboarding, compliance validation, documentation, and operational processes. The role will focus on leveraging Generative AI, Agentic Frameworks, and enterprise automation technologies to improve efficiency, consistency, and scalability across privileged access management services.

We seek someone who is proactive and takes ownership of the service. The candidate is expected to review various sources for best practices, security information, and threat vectors in order to determine the potential impact to the environment and recommend configurations and solutions accordingly. Risk assessment techniques, scripting, linux and Windows administration, and cloud technology experience are desired

Acts as the technical owner for solution design activities, driving requirements analysis, architecture decisions, implementation planning, and continuous service improvement.

Essential Functions of the Job:

• Develop and manage CyberArk’s Privileged Account Security Solution including the following:
• Configure and operate CyberArk Enterprise Password Vault component and Safe design
• Configure and operate CPM and PVWA components
• Configure and operate High Availability and DR components
• Configure and operate PSM, AAM, and CCP products
• Lead solution and design reviews for privileged access onboarding initiatives.
• Develop repeatable solution patterns and reference architectures for credential protection capabilities.
• Create standards for credential protection integrations.
• Partner with application teams to assess requirements and define privileged access onboarding strategies.
• Provide technical leadership and guidance on PAM design decisions.
• Design and develop AI agents for solution assessment, pattern recommendation, design document generation, compliance validation, and knowledge management.
• Design, build, test, and maintain AI agents using enterprise-approved frameworks.
• Develop Retrieval Augmented Generation (RAG) solutions leveraging PAM documentation and knowledge repositories.
• Build workflow automation integrating ServiceNow, CyberArk, Active Directory, and cloud platforms.
• Develop prompt engineering standards and AI governance controls.
• Measure and report AI solution effectiveness through KPIs and adoption metrics.
• Facilitate design workshops with stakeholders, translate business requirements into technical solution designs, present recommendations to senior leadership, and drive alignment across security, application, infrastructure, and operations teams.
• Configure and operate Multi-factor authentication
• Configure and operate LDAP, RADIUS, and SAML integration
• Integrating various target platforms such as operating system, network device, service accounts, etc.
• Document, report, and present on CyberArk design, performance metrics, security and operational log activity
• Develop working knowledge for extended global team on all matters related to CyberArk technology
• Follow ITIL process for incident and change management
• Excellent English language skills, both written and verbal
• Excellent interpersonal, communication, consultative and project management skills
• Must be self-motivated and able to work independently, often unsupervised

Analytical/Decision Making Responsibilities:

• Ability to recognize and research attacks and attack patterns
• Ability to work effectively with clients, management staff members, vendors and consultants
• Demonstrated creative problem-solving skills including defining and resolving issues.
• Identify and escalate project risks to management.
• Superior skill in organizing, managing and interpreting data and reports.
• Ability to interface with cross-functional technology teams
• Project planning and project leadership skills
• Communicates proactively and often with counselees and team members to drive open and honest development and career conversations for the purpose of building trust, authentic meaningful relationships and exceptional career experiences.

Knowledge and Skills Requirements:

• Experience with CyberArk Privileged Account Security Solution
• Experience with server operating system technologies
• Strong network and/or system administration background
• Packet capture analysis
• Strong knowledge of Active Directory
• Strong knowledge of cloud technologies
• Experience producing solution designs, high-level designs (HLDs), and low-level designs (LLDs).
• Experience performing threat modeling and security architecture reviews.
• Cloud architecture experience, preferably with Microsoft Azure.
• Experience with integration architecture and API design.
• Experience mapping security controls to NIST, ISO 27001, CIS, and related frameworks.
• Experience with Generative AI, LLMs, Agentic Frameworks.
• Familiarity with Microsoft Copilot, Azure AI.
• Experience with Microsoft Copilot Studio.
• Experience with scripting languages, especially PowerShell
• Strong knowledge of information security concepts and technologies
• Understanding of cryptography standards
• Knowledgeable in all ISO and/or ISC2 defined domains of security
• Strong research skills
• Experience with ServiceNow IT Service Management system desired
• Experience with applying industry security standards such as NIST, ISO
• Developing and testing execution of disaster recovery plans
• Experience with 24x7 support a plus
• Demonstrated team skills and integrity in a professional environment
• Exceptional social, communication, and technical and general writing skills

Supervision Responsibilities:

• Applies a global mindset when leading teams, taking into consideration cultural differences, time zones and any other factors that may impede effective teaming.
• Responsible for providing guidance to colleagues in global dispersed team where required through established coaching and feedback processes
• Build and deploy high performance teams
• Act as a visible role model
• Establish process and standards for our team to follow as it pertains to service operation and continuity
• Drive strategic initiatives
• Demonstrate business acumen
• Realize operational excellence
• Support the foundations of service quality – be professional and consistent
• Provide exceptional service to clients and stakeholders – be connected, responsive, and insightful
• Promote and sustain effective risk management and compliance
• On call with ability to work flexible schedule as needed to provide 24x7 support coverage

Job Requirements:

Education:

• Bachelors or Masters Degree in Computer Science, Information Systems, Engineering or related field.

Experience:

Required qualifications

• 5–7+ years of IAM/PAM experience.
• CyberArk design and implementation experience.
• PowerShell or automation development experience.
• Active Directory and cloud security experience.
• Developing and maintaining privilege account management platforms, especially CyberArk
• Developing and maintaining security application platforms, especially related to Identity and Access Management
• Active Directory configuration, administration, and troubleshooting
• Windows Server platform administration
• Cloud technology configuration and administration
• Scripting and writing PowerShell Cmdlets
• Experience implementing AI solutions within regulated enterprise environments.

Preferred qualifications

• AI solution development experience.
• Enterprise architecture experience.
• Microsoft Copilot Studio or Azure AI experience.
• ServiceNow workflow development experience.

Certification Requirements:

• MCSA, CISSP, CISM or CISA, Cyberark Certifications is a plus

EY | Building a better working world 

 
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.  

 
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.  

 
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.