Senior Agent Identity Engineer, Microsoft Entra (AI Agents)

Senior Agent Identity Engineer, Microsoft Entra (AI Agents)

Duration: October 2026- through March 2027

Location: Remote

What you'll do

• Enable and configure Microsoft Entra Agent ID and Microsoft Agent 365 in a large enterprise tenant.
• Design the agent identity model across users, workload identities, managed identities and agent identities.
• Provision agent identities and record who each agent acts for and what it may do.
• Set up delegated, on-behalf-of access so an agent's identity carries through to the tools it calls, including in other clouds.
• Automate the agent lifecycle with Entra ID Governance: sponsor changes, leaver events, access reviews and deprovisioning.
• Configure discovery of unmanaged agents with Microsoft-native tooling.
• Route identity events to the SIEM and reconcile identities with the governance register.

Required

• 8+ years of identity and access engineering, with deep hands-on Microsoft Entra ID at enterprise scale.
• Expert in OAuth 2.0 and OIDC: on-behalf-of flows, app registrations, service principals, workload identity federation and managed identities.
• Conditional Access, Entra ID Governance (lifecycle workflows, access reviews, entitlement management) and Privileged Identity Management.
• Automation with Microsoft Graph API and PowerShell.
• Strongly preferred
• Hands-on with Entra Agent ID or Agent 365, or with governing Copilot Studio or Microsoft 365 Copilot agents.

Nice to have

• Federating Entra ID with AWS (IAM Identity Center, STS, OIDC identity providers).
• Microsoft Sentinel, Defender for Cloud Apps and Purview.
• Power Platform governance.
• HR-driven identity lifecycle automation.
• Insurance or financial services; AI governance frameworks such as NIST AI RMF or ISO/IEC 42001.