Key Skills: Microsoft Entra ID, OAuth 2.0, OIDC, SAML, API Security
Experience: 8+ years in IAM engineering with hands-on identity and API security experience
Role Summary
The Agentic AI Identity and Authorization Engineer will design, implement and troubleshoot secure identity and delegated authorization patterns for enterprise AI agents and downstream APIs. The role requires strong hands-on Microsoft Entra ID engineering, protocol-level knowledge of OAuth 2.0, OpenID Connect and SAML, and practical automation skills across Microsoft Graph, REST APIs, PowerShell and Python.
Key Responsibilities
· Engineer Microsoft Entra ID configurations for enterprise applications, app registrations, service principals, permissions, consent, groups and app roles.
· Implement and validate OAuth 2.0, OpenID Connect and SAML authentication and authorization flows, including authorization code and client credentials flows.
· Design and implement API security and delegated authorization patterns, including On-Behalf-Of, token exchange, least-privilege access and downstream API authorization.
· Configure and validate JWTs, scopes, claims, delegated permissions, application permissions and token-validation requirements.
· Develop automation and integration utilities using PowerShell, Python, REST APIs, Microsoft Graph and Postman.
· Troubleshoot complex authentication and authorization issues using Entra sign-in logs, audit logs, token claims, correlation IDs and API responses.
· Partner with AI platform, security and application engineering teams to embed secure identity patterns into Agentic AI solutions.
· Create implementation documentation, test evidence and technical guidance for supported identity and authorization patterns.
Required Skills and Experience
· 8+ years of IAM engineering experience, including strong hands-on Microsoft Entra ID expertise.
· Deep experience with enterprise applications, app registrations, service principals, permissions, consent, groups and app roles.
· Advanced knowledge of OAuth 2.0, OpenID Connect and SAML, including authorization code flow, client credentials, JWTs, scopes, claims and token validation.
· Hands-on experience with delegated authorization, On-Behalf-Of, token exchange, least privilege and downstream API authorization.
· Strong scripting and API integration skills using PowerShell, Python, REST APIs, Microsoft Graph and Postman.
· Proven ability to troubleshoot authentication and authorization flows using Entra sign-in logs, audit logs, token contents and correlation IDs.
· Strong understanding of API security, workload identities, application identities and secure machine-to-machine access patterns.
Preferred Experience
· Identity and authorization engineering for Generative AI or Agentic AI solutions.
· Experience securing AI agents, non-human identities, workload identities or service-to-service interactions.
· Familiarity with Zero Trust, policy-based authorization and enterprise API gateways.
· Microsoft Identity and Access Administrator Associate, Azure Security Engineer Associate, or comparable IAM/security certification.
