Deloitte · Dallas, TX

Salary
Posted
Jun 30, 2026
Location
Dallas, TX
Last confirmed open
Jul 21, 2026

What this job asks for AI summary

This role sits within an Identity and Access Management team and centers on building generative AI solutions — including LLM applications, retrieval-augmented generation, and AI agents — with security controls built in from the ground up. Day-to-day work involves engineering authentication and authorization for both human and non-human identities, developing least-privilege guardrails for agentic workflows, and implementing governance and monitoring for AI systems. It suits a software engineer with a grounding in IAM concepts who has begun working hands-on with generative AI tooling.

Mid level · 3+ years · Gilbert, AZ / Lake Mary, FL / Mechanicsburg, PA (multi-site) · Bachelor's required · Secret clearance · Full-time

Must have (7)
Python · 3+ yrsLLMs · 1+ yrsRAGOIDCSAMLOAuthJWT
Nice to have (6)
SailPoint, Okta or Active DirectoryHashiCorp Vault or CyberarkLangChain or LangGraphOpen Policy Agent, Cedar or OpenfgaAWS or Azure · 2+ yrsTerraform or Ansible · 1+ yrs

“or” means any one of them counts — you don't need all of them.

Posted 3 times — it's one opening, so apply once.

We read this from the posting text with AI. Skim the description below before ruling yourself out.

How this req sits in the market our data

What gives you an edge
SAML6%RAG8%

Rare in this occupation — lead with these, and say what you built with them.

What won't set you apart
Python51%

Most people in this occupation already list these. Still required — just not what gets you shortlisted.

What the occupation pays Median $138,970 (middle half $107,524–$175,762).

Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.

Why we read it this way (9)

The role is a genuine hybrid between software engineering (building GenAI solutions) and identity/security engineering (IAM controls, guardrails, governance). 15-1252 Software Developers was chosen as primary because the JD emphasizes hands-on building and integration of LLM applications, RAG pipelines, and AI agents; 15-1212 Information Security Analysts is the runner-up given the heavy IAM and security-governance focus.

The clearance requirement is stated as 'ability to obtain and maintain the necessary security clearance' — the JD also notes 1+ year of federal government experience as preferred, suggesting a Secret-level clearance is the likely target. No specific clearance level is named, so Secret was inferred; this should be confirmed with the hiring team.

The role is tied to specific US Delivery Center locations (Gilbert AZ, Lake Mary FL, Mechanicsburg PA) and Geo-Hub cities (Atlanta, Charlotte, Dallas, Houston, Philadelphia). No single CBSA code applies; the metro field reflects the multi-site nature.

OIDC, SAML, OAuth, and JWT are listed together as a single 'working knowledge' requirement under Required qualifications; each is emitted as a separate must-have skill because they are distinct protocols.

LLMs and RAG are both drawn from the single '1+ year of hands-on experience building…LLM applications, retrieval-augmented generation (RAG), or AI agents' requirement; the years demanded of 1 is assigned to LLMs as the primary named item; RAG is emitted separately without a years figure since the requirement is stated as an 'or' across the three.

Model Context Protocol (MCP) appears alongside LangChain/LangGraph under Preferred; it is folded into the LangChain skill's alternatives rather than emitted separately, as the JD groups them as interchangeable AI agent frameworks.

CISSP, CCSP, AWS Certified Solutions Architect, and Azure Solutions Architect certifications are listed as preferred but are certifications/credentials rather than named technologies or tools, so they are not emitted as skills.

The NIST AI RMF and OWASP Top 10 for LLM Applications are mentioned under Preferred as governance/risk frameworks; they are methodologies rather than concrete tools and are not emitted as skills.

Requires a Secret clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.

Read the full posting

The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.

Apply

Apply on employer site ↗