Role Description

At FNZ, our purpose is to make wealth management more accessible, bringing easier, fairer and more inclusive solutions to people worldwide. Here in the Security Technology & Operations team, we are on a mission to embed cyber resilience across FNZ, protecting the platforms that support investment solutions for over 20 million people.

We are seeking an Identity Security AI Engineer to design, engineer and operationalise AI-enabled identity security capabilities. The role will combine identity engineering, security automation and responsible AI to strengthen how FNZ governs human, privileged and non-human identities, including AI agents and workload identities through Saviynt and Entra.

The successful candidate will work across Identity Security, Cyber Security, cloud engineering and application teams to develop secure AI-assisted workflows, identity analytics and policy enforcement. The role will support global services spanning Microsoft Entra ID, Active Directory, Saviynt, CyberArk and secrets management platforms, while ensuring solutions are explainable, auditable and aligned with FNZ security standards.

Specific Role Responsibilities

- Contribute to the Identity Security roadmap, identifying practical uses of AI that improve control effectiveness, user experience and operational efficiency.
- Design and build AI-assisted identity workflows for Joiner, Mover and Leaver processes, access requests, approvals, certification campaigns and exception handling.
- Develop identity analytics and recommendation capabilities for entitlement analysis, role mining, access review prioritisation, toxic combination detection and excessive privilege reduction.
- Engineer secure identity patterns for AI agents, service principals, managed identities, APIs and other non-human identities across Azure, AWS and GCP.
- Implement authentication, authorisation, least privilege, Just-In-Time access and Zero Standing Privilege controls for AI-enabled services and autonomous agents.
- Integrate AI and automation capabilities with Microsoft Entra ID, Active Directory, Saviynt, CyberArk, Infisical and FNZ service-management workflows.
- Develop and maintain Python,



PowerShell and API-based automation, with appropriate testing, version control, CI/CD, monitoring and support documentation.
- Build safeguards for AI solutions, including prompt and input protection, data minimisation, human approval points, audit logging and model or agent access controls.
- Create monitoring and detection use cases for anomalous access, privilege escalation, dormant access, credential misuse and unusual non-human identity behaviour.
- Ensure AI-generated recommendations remain explainable and reviewable, and do not directly grant privileged or high-risk access without defined policy and human oversight.
- Support security architecture reviews, threat modelling, control assessments, audit evidence and the development of policies, standards and engineering patterns.
- Work closely with global engineering, security, risk, privacy and business stakeholders to move approved prototypes into reliable, supportable production services.
- Measure delivered outcomes, including automation coverage, recommendation accuracy, false-positive rates, access-review effort reduction, standing privilege reduction and control adoption.

Experience required

Primary requirements

- Solid hands-on experience in Identity security, encompassing identity lifecycle management, access governance, authentication, authorisation and privileged access.
- Practical engineering experience with Microsoft Entra ID and Active Directory, including Conditional Access, Privileged Identity Management, enterprise applications, service principals and managed identities.
- Strong automation and software-engineering skills using Python and/or PowerShell, REST APIs, Git-based version control, testing and CI/CD practices.
- Experience integrating with identity platforms such as Saviynt and CyberArk,



and with secrets-management services such as Infisical and Azure Key Vault
- Knowledge of AI and large language model concepts, including agents, guardrails and secure prompt handling.
- Ability to apply security controls to AI solutions, including least privilege, data protection, logging, traceability, human oversight and secure model or agent access.
- Good knowledge of RBAC, SAML, SCIM, MFA and Zero Trust principles.
- Experience working with cloud identity and workload identity patterns across Azure
- Ability to translate identity risks and AI use cases into secure, scalable and supportable technical solutions.
- Strong stakeholder communication skills and the ability to explain technical, security and risk concepts to engineering, control and leadership audiences.
- Experience producing engineering documentation, operating procedures, security standards and auditable technical evidence.

Desirable experience
- Experience with Azure AI Foundry, Microsoft Copilot Studio, AI engineering frameworks.
- Experience with identity threat detection, graph analytics, behavioural analytics or permissions-management technologies.
- Relevant certifications such as Microsoft Identity and Access Administrator, Azure AI Engineer Associate, Azure Security Engineer Associate, CISSP or equivalent practical experience.

About FNZ Culture Our culture is what drives us. It's at the heart of who we are and everything we do. It's what inspires, excites and moves us forward. Our ambition is to create a culture for growth, one that opens up limitless opportunities for our employees, customers and the wider world. At FNZ we know that great impact is only possible with great teamwork.

Thats why we value the strength and diversity of thought in our global team.

The FNZ Way is the cornerstone of what we do. It is comprised of four values that set the standard for how everyone at FNZ interacts with each other, with our customers, and with all our diverse stakeholders around the world.

1. Customer obsessed for the long-term
2. Think big and make an impact
3. Act now and own it all the way
4. Challenge, commit and win together

📌 Identity Security Senior AI Engineer (Pune)
🏢 FNZ
📍 Pune