Senior Agent Identity Engineer, Microsoft Entra (AI Agents)
Senior Agent Identity Engineer, Microsoft Entra (AI Agents)
Duration: October 2026- through March 2027
Location: Remote
What you'll do
- Enable and configure Microsoft Entra Agent ID and Microsoft Agent 365 in a large enterprise tenant.
- Design the agent identity model across users, workload identities, managed identities and agent identities.
- Provision agent identities and record who each agent acts for and what it may do.
- Set up delegated, on-behalf-of access so an agent's identity carries through to the tools it calls, including in other clouds.
- Automate the agent lifecycle with Entra ID Governance: sponsor changes, leaver events, access reviews and deprovisioning.
- Configure discovery of unmanaged agents with Microsoft-native tooling.
- Route identity events to the SIEM and reconcile identities with the governance register.
Required
- 8+ years of identity and access engineering, with deep hands-on Microsoft Entra ID at enterprise scale.
- Expert in OAuth 2.0 and OIDC: on-behalf-of flows, app registrations, service principals, workload identity federation and managed identities.
- Conditional Access, Entra ID Governance (lifecycle workflows, access reviews, entitlement management) and Privileged Identity Management.
- Automation with Microsoft Graph API and PowerShell.
- Strongly preferred
- Hands-on with Entra Agent ID or Agent 365, or with governing Copilot Studio or Microsoft 365 Copilot agents.
Nice to have
- Federating Entra ID with AWS (IAM Identity Center, STS, OIDC identity providers).
- Microsoft Sentinel, Defender for Cloud Apps and Purview.
- Power Platform governance.
- HR-driven identity lifecycle automation.
- Insurance or financial services; AI governance frameworks such as NIST AI RMF or ISO/IEC 42001.
Remote
Skills:
Amazon Web Services (AWS), Application Programming Interface (API), Artificial Intelligence (AI), Artificial Intelligence (AI) Agents, Automation, Cloud Applications, Cloud Computing, Financial Services, ISO (International Organization for Standardization), Identity Data Management, Identity Federation, Insurance, International Electro-Technical Commission (IEC), Machine Tool, Microsoft Access Database, Microsoft Agent, Microsoft Product Family, OAuth, Security Information and Event Management (SIEM), U.S. National Institute of Standards and Technology (NIST), Windows PowerShell
Vdart Inc