AI Identity Architect

About the role

EY is looking for an AI Identity Architect in Buenos Aires (hybrid) to design and govern the integration of Agentic AI, automation and intelligence into its global Identity and Access Management (IAM) ecosystem. The role partners with Security Architects, Development Leads, Engineering, Operations and other teams to make sure AI solutions are secure, compliant with IAM standards and aligned with EY's global technology and security strategies. It reports to the Head of Identity & Access Management / Global IAM Architect.

Key responsibilities

• Partner with Architecture, Information Security, Client Technology and Enterprise Technology teams to embed AI-driven capabilities into the enterprise IAM strategy.
• Architect AI-augmented solutions and integrate features such as adaptive access control, predictive threat detection and identity analytics.
• Define architectural standards, frameworks and patterns for AI-assisted IAM across on-premises, hybrid and cloud environments, and establish guardrails and governance for safe, auditable deployment of AI and agentic agents.
• Define identity management strategies for AI agents, including their life cycles, entitlements and owner relationships.
• Act as a trusted advisor to senior leadership on Agentic AI in identity operations, user experience and risk reduction, and align with enterprise AI governance and model management frameworks.
• Design the agent identity model in Microsoft Entra Agent ID (parent/child inheritance, instances, sponsorship, credential model) and the Microsoft Agent 365 control plane, including conditional access, risk-based responses, access packages, access reviews, lifecycle workflows and delegation and consent models.
• Work with Microsoft Purview and Microsoft Defender owners so data protection, DLP, audit and threat response cover agent activity end to end.
• Set standards for privileged agent access (no standing privilege, short-lived credentials, just-in-time elevation, least privilege).

Required profile

• Bachelor's or Master's degree in Information Assurance, Computer Science, Information Systems or a related field.
• 12+ years of practical IT experience, 8+ years in information security, 6+ years in hands-on IAM roles, and 2+ years architecting AI/ML identity systems.
• Proven experience advising clients on architecture, roadmaps, optimization and migration strategies.
• Ideally: experience designing or governing Agentic AI agents, and hands-on familiarity with frameworks such as LangChain, CrewAI or AutoGen.

Required skills

• Enterprise IAM platforms (Entra ID, SailPoint, CyberArk, PlainID) and identity analytics.
• Agentic AI architectures (multi-agent systems, LLM orchestration, reinforcement-based agents or decision engines).
• Microsoft Entra Agent ID, Agent 365, Entra ID Protection, Entra ID Governance, Microsoft Purview and Microsoft Defender.
• Model Context Protocol (MCP) or equivalent AI orchestration standards.
• Ability to communicate security requirements and complex AI and identity concepts to development teams and management.