Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Technology Architect Assistant Director role.

Rezi rewrites your resume against EY's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Technology Architect Assistant Director posting at EY — free, in seconds.

About the Role

The Artificial Intelligence (AI) Identity Architect will partner across technology and business teams to design and govern the integration of Agentic AI, automation and intelligence into EY’s global Identity and Access Management (IAM) ecosystem. The architect will collaborate closely with Security Architects, Development Leads, Engineering, Operations and other internal business teams to ensure that Agentic AI solutions are securely designed, compliant with IAM standards and aligned with EY’s global technology and security strategies. The AI Identity Architect is accountable and responsible for the alignment of business, operational and security requirements and translation of those requirements into technical IAM capabilities.

Responsibilities

Partner with Architecture, Information Security, Client Technology, and Enterprise Technology teams to embed AI-driven capabilities into the enterprise IAM strategy, ensuring alignment with business goals, security policies, regulatory requirements, and organizational technology roadmaps
Architect AI-augmented solutions that enhance the global IAM platforms’ intelligence, automation and adaptive capabilities
Architect and integrate AI-based features, such as adaptive access control, predictive threat detection and identity analytics, into the IAM framework
Define architectural standards, frameworks and patterns for AI-assisted IAM services across on-prem, hybrid and cloud environments
Establish architectural guardrails and governance models for safe and auditable deployment of AI and Agentic agents across EY’s business teams
Define and enforce identity management strategies tailored for AI agents, including their unique life cycles, entitlements, and owner relationships
Serve as a trusted advisor to senior leadership on the application of Agentic AI to identity operations, user experience and risk reduction
Partner with data and platform teams to ensure alignment with enterprise AI governance and model management frameworks
Design the agent identity model in Microsoft Entra Agent ID agent identity blueprints, parent/child inheritance, agent instances, sponsorship and ownership, and the credential model for delegated versus application-only access
Establish the Microsoft Agent 365 control plane across its five pillars Registry, Access Control, Visualization, Interoperability and Security and define the operating model for the Agent 365 registry in the Microsoft 365 admin center
Define the registration and discovery pathway so that agents built in Copilot Studio, Microsoft Foundry, the Microsoft Agent Framework, the Agent 365 SDK and third-party or open-source frameworks all converge on a single authoritative registry
Design Conditional Access for agents, risk-based response using Microsoft Entra ID Protection, and network-layer controls for agent traffic
Extend Microsoft Entra ID Governance to agent identities: access packages scoped to agent identities, access reviews, lifecycle workflows, sponsor notification and sponsorship-transfer handling, and time-bound access with automated expiry
Design the delegation and consent model for agents acting on behalf of users, including token exchange, scope minimization and revocation paths
Define the approach to shadow-AI discovery locally run and cloud-hosted agents surfaced through Microsoft Defender, Microsoft Intune and Agent 365 and the remediation path from discovery to governed identity
Establish architectural guardrails and governance models for the safe, auditable deployment of AI and agentic systems across business teams
Define architectural standards, frameworks and patterns for AI-assisted IAM services across on-premises, hybrid and cloud environments
Design systems and integrations using the Model Context Protocol (MCP), agent-to-agent (A2A) patterns and equivalent AI orchestration standards, with authentication, authorization and auditability designed in rather than bolted on
Work with Microsoft Purview and Microsoft Defender owners so that data protection, DLP, audit and threat response cover agent activity end to end
Define the control set that satisfies internal policy, external regulation and audit for non-human identities, and evidence it through logging, reporting and recertification
Set standards for privileged agent access no standing privilege, short-lived credentials, just-in-time elevation and least-privilege scope design

Requirements

Proven experience in providing architecture guidance and advisory services to internal or external clients for various environments and systems, including application/technology blueprints, roadmaps, optimization, and migration strategies
Extensive experience implementing or architecting AI, ML or automation technologies within IAM or cybersecurity domains
Experience designing and integrating systems using the Model Context Protocol (MCP) or equivalent AI orchestration standards
Strong knowledge of Agentic A architectures (multi-agent systems, LLM orchestration, reinforcement-based agents or decision engines)
Strong experience with enterprise IAM platforms (Entra ID, SailPoint, CyberArk, PlainID) and identity analytics
Ability to effectively communicate and advocate key security requirements and controls for implementation by development teams
Ability to communicate effectively with all levels of management, both verbally and in writing
12+ years of practical experience in the field of IT is required
8+ years of direct Information Security experience
6+ years’ experience in hands-on Identity & Access Management positions
2+ years of experience implementing or architecting AI/ML Identity systems
Experience designing or governing Agentic AI agents for workflow orchestration or decision automation
Hands-on familiarity with Agentic AI frameworks (LamgChain, CrewAI, AutoGen or similar)
Ability to articulate complex AI and identity concepts to non-technical stakeholders

Skills

Information Security
AI
ML
Automation
IAM
Cybersecurity
Model Context Protocol (MCP)
Agentic AI architectures
Multi-agent systems
LLM orchestration
Reinforcement-based agents
Decision engines
Enterprise IAM platforms
Entra ID
SailPoint
CyberArk
PlainID
Identity analytics
Microsoft Entra Agent ID
Microsoft Agent 365
Copilot Studio
Microsoft Foundry
Microsoft Agent Framework
Agent 365 SDK
Microsoft Entra ID Protection
Microsoft Entra ID Governance
Microsoft Defender
Microsoft Intune
Microsoft Purview
Agent-to-agent (A2A) patterns
Data protection
DLP
Audit
Threat response

Location

New York City
Boston
Washington DC Metro Areas
Washington State
Southern California
Bay Area California
Sacramento
All other offices locations in the US

Work Type

Onsite
Remote
Hybrid

Experience Level

12+ years of practical experience in the field of IT
8+ years of direct Information Security experience
6+ years’ experience in hands-on Identity & Access Management positions
2+ years of experience implementing or architecting AI/ML Identity systems

Education Level

Bachelor’s or Master’s degree in Information Assurance, Computer Science, Information Systems or related field of study

Salary/Compensations

New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $158,200 to $269,000
Bay Area California offices – $164,800 to $280,200
All other offices locations in the US, including Sacramento – $131,900 to $246,600

Benefits

Medical and dental coverage
Pension and 401(k) plans
Wide range of paid time off options
Flexible vacation policy
Time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence

About the Company

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions.
Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

Equal Opportunity

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.
EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at ssc.customersupport@ey.com.