Agentic Identity Security Consultant

We Are

Accenture Security helps organizations prepare, protect, detect, respond, and recover along with all points of the security lifecycle. Cybersecurity challenges are different for every business in every industry. Leveraging our global resources and advanced technologies, we create integrated, turnkey solutions tailored to our client's needs across their entire value chain. Whether we're defending against known cyberattacks, detecting and responding to the unknown, or running an entire security operations center, we will help companies build cyber resilience to grow with confidence. Our team of the security sector's brightest people uses the coolest tech to out-hack the hackers and help clients build resilience from within. We blend risk strategy, digital identity, cyber defense, application security, and managed service solutions to rethink the entire security lifecycle.

Do you have the deep functional and technical experience to help implement security solutions that align with our clients' business objectives? Do you have the expertise to design and deliver solutions for establishing system user's credentials, and processes for applying those credentials to access enterprise systems and applications?If so, read on and apply. Accenture's more than 2,000 security professionals deliver holistic and proactive security solutions in 47 countries, and we'd love to discuss our open Identity and Access Management (I&AM) Security role with you

You Are

An engineer who has stayed an engineer. You came up building things, and you have no interest in a career track that takes that away. You're resourceful about how you get there. You know which problems call for a library, which call for a vendor product, and which call for writing the thing yourself. You read the spec instead of guessing what it says. You've debugged something at 2am because you wanted to know why it broke, not because anyone asked.

You've shipped code that other people depended on and that you were on the hook for when it broke. You go one layer deeper than the assignment required. You can explain a hard technical idea to someone who doesn't share your background without either condescending or hiding behind jargon.

You almost certainly haven't done this specific work before. Very few people have, which is most of why it's interesting.

The Work

The Forward Deployed Engineer, Agentic Identity Platform is a hands-on technical role. How much of any given week you spend writing code will vary by engagement, but you'll be expected to understand the systems you work on at implementation depth, and to be able to build in them when the work calls for it. If your recent experience is limited to producing architecture decks, running vendor implementations, or coordinating offshore delivery, this is probably not the right fit, and we would rather tell you now than in the third interview.

Enterprises are deploying AI agents faster than anyone has figured out how to secure them. An agent authenticates to twelve systems, spawns subagents, calls tools on behalf of a user who left the company last month and holds credentials nobody inventoried. The identity primitives that industry spent twenty years building for humans and service accounts don't cleanly extend to actors that are autonomous, ephemeral, and delegating authority to each other.

We're building the platforms that solve this: agent registries, delegated authorization models, runtime attribution, and policy engines that make decisions in single-digit milliseconds. Some of it ships to Fortune 100 clients. Some of it becomes the reference architecture the industry copies. There's no vendor product to install because in several of these areas the product doesn't exist yet.

You'd be a Forward Deployed Engineer, which means you write the code and you're in the room, possibly virtually, with the client while it runs in their environment.

Specifically:

• Build and ship services in the agentic identity stack: authorization engines, agent registries, credential brokers, and authentication layers for MCP servers

• Own a component end to end: design, implementation, deployment, and what happens when it fails at 3am

• Reverse-engineer how identity actually works in a client environment, then design what it should be

• Prototype against emerging standards and vendor betas, often before documentation exists

• Build the internal tooling and reference implementations the rest of the practice reuses

• Explain your design to a client's engineers and defend the parts they push back on

Most people arrive without the identity background, including people who are strong at all of it now. If you have some of it, tell us. If not, we'll teach you, and you'll learn it faster here than anywhere else because you'll be implementing the specs rather than reading about them.

What We'd Like to See

Optional, and not part of how we evaluate candidates. If you'd like to include a link to code you've written, an open-source contribution, or a technical writeup, we enjoy reading them. If your work is under NDA and you'd rather describe in prose what you built, what was hard about it, and what you'd change, that's equally welcome. Applications without either are considered on exactly the same basis.

Travel may be required for this role. The amount of travel will vary from 0 to 100% depending on business need and client requirements.

Here's What You Need

• Minimum of 3 years of professional experience building and shipping production software

• Hands-on technical work within the last 18 months, counting production development, prototyping, or code review

• Minimum of 2 years of professional development in at least one of Python, Go, Rust, TypeScript, Java, or C++

• Minimum of 2 years building concurrent or distributed systems that ran in production

• Minimum of 2 years of hands-on experience deploying and operating cloud infrastructure on AWS, Azure, or GCP, including containers and CI/CD pipelines

• Bachelor's degree in Computer Science (or equivalent) OR (minimum 12 years) work experience. (If Associate's Degree, must have minimum 6 years work experience)

Professional Skills Requirements

• At least 1 production service or component you owned end to end, covering design, implementation, deployment, and ongoing operation

Bonus points if you have

• Experience with OAuth 2.0, OIDC, token exchange, SAML, SPIFFE, PKI, or mTLS

• Experience with MCP, agent frameworks, or LLM application development

• Experience in identity and access management, IGA, PAM, secrets management, or non-human identity

• Applied cryptography experience, including enough to know what you don't know

• Participation in a production on-call rotation

• Judgment about which problems call for a library, which call for a vendor product, and which call for writing the thing yourself

• Comfort explaining a design to a client's engineers and defending the parts they push back on

Compensation at Accenture varies depending on a wide array of factors, which may include but are not limited to the specific office location, role, skill set, and level of experience. As required by local law, Accenture provides a reasonable range of compensation for roles that may be hired as set forth below.

We anticipate this job posting will be posted until 11/30/2026.

Accenture offers a market competitive suite of benefits including medical, dental, vision, life, and long-term disability coverage, a 401(k) plan, bonus opportunities, paid holidays, and paid time off. See more information on our benefits here: U.S. Employee Benefits | Accenture (

Role Location Annual Salary Range

California $70,350 to $205,800

Colorado $63,800 to $177,800

Connecticut $63,800 to $177,800

District of Columbia $68,000 to $189,300

Illinois $59,100 to $177,800

Maine $54,400 to $151,400

Maryland $63,800 to $177,800

Massachusetts $63,800 to $189,300

Minnesota $63,800 to $177,800

New York $66,300 to $205,800

New Jersey $68,000 to $205,800

Ohio $59,100 to $164,600

Virginia $59,100 to $189,300

Washington $80,200 to $189,300

#LI-MP

Requesting an Accommodation

Accenture is committed to providing equal employment opportunities for persons with disabilities or religious observances, including reasonable accommodation when needed. If you are hired by Accenture and require accommodation to perform the essential functions of your role, you will be asked to participate in our reasonable accommodation process. Accommodations made to facilitate the recruiting process are not a guarantee of future or continued accommodations once hired.

If you would like to be considered for employment opportunities with Accenture and have accommodation needs such as for a disability or religious observance, please call us toll free at View phone number on click.appcast.io or send us an email or speak with your recruiter.

Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.

For details, view a copy of the Accenture Equal Opportunity Statement (

Accenture is an EEO and Affirmative Action Employer of Veterans/Individuals with Disabilities.

Accenture is committed to providing veteran employment opportunities to our service men and women.

Other Employment Statements

Applicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States.

Candidates who are currently employed by a client of Accenture or an affiliated Accenture business may not be eligible for consideration.

Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process. Further, at Accenture a criminal conviction history is not an absolute bar to employment.

The Company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. Additionally, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company's legal duty to furnish information.

California requires additional notifications for applicants and employees. If you are a California resident, live in or plan to work from Los Angeles County upon being hired for this position, please click here for additional important information.

Please read Accenture's Recruiting and Hiring Statement for more information on how we process your data during the Recruiting and Hiring process.