Agentic AI Identity and Authorization Engineer

Job Description: Agentic AI Identity and Authorization EngineerJob Title: Senior Identity and Authorization Engineer - Agentic AIKey Skills: Microsoft Entra ID, OAuth 2.0, OIDC, SAML, API SecurityLocation: Columbus, OH, USAExperience: 8+ years in IAM engineering with hands-on identity and API security experienceRole SummaryThe Agentic AI Identity and Authorization Engineer will design, implement and troubleshoot secure identity and delegated authorization patterns for enterprise AI agents and downstream APIs. The role requires strong hands-on Microsoft Entra ID engineering, protocol-level knowledge of OAuth 2.0, OpenID Connect and SAML, and practical automation skills across Microsoft Graph, REST APIs, PowerShell and Python.Key Responsibilities Engineer Microsoft Entra ID configurations for enterprise applications, app registrations, service principals, permissions, consent, groups and app roles. Implement and validate OAuth 2.0, OpenID Connect and SAML authentication and authorization flows, including authorization code and client credentials flows. Design and implement API security and delegated authorization patterns, including On-Behalf-Of, token exchange, least-privilege access and downstream API authorization. Configure and validate JWTs, scopes, claims, delegated permissions, application permissions and token-validation requirements. Develop automation and integration utilities using PowerShell, Python, REST APIs, Microsoft Graph and Postman. Troubleshoot complex authentication and authorization issues using Entra sign-in logs, audit logs, token claims, correlation IDs and API responses. Partner with AI platform, security and application engineering teams to embed secure identity patterns into Agentic AI solutions. Create implementation documentation, test evidence and technical guidance for supported identity and authorization patterns.Required Skills and Experience 8+ years of IAM engineering experience, including strong hands-on Microsoft Entra ID expertise. Deep experience with enterprise applications, app registrations, service principals, permissions, consent, groups and app roles. Advanced knowledge of OAuth 2.0, OpenID Connect and SAML, including authorization code flow, client credentials, JWTs, scopes, claims and token validation. Hands-on experience with delegated authorization, On-Behalf-Of, token exchange, least privilege and downstream API authorization. Strong scripting and API integration skills using PowerShell, Python, REST APIs, Microsoft Graph and Postman. Proven ability to troubleshoot authentication and authorization flows using Entra sign-in logs, audit logs, token contents and correlation IDs. Strong understanding of API security, workload identities, application identities and secure machine-to-machine access patterns.Preferred Experience Identity and authorization engineering for Generative AI or Agentic AI solutions. Experience securing AI agents, non-human identities, workload identities or service-to-service interactions. Familiarity with Zero Trust, policy-based authorization and enterprise API gateways. Microsoft Identity and Access Administrator Associate, Azure Security Engineer Associate, or comparable IAM/security certification.Other detailsSalary range $90000 to $173500Equal opportunity Employer:Mphasis is an equal opportunity/affirmative action employer. We provide equal employment opportunities to applicants and existing associates and evaluate qualified candidates without regard to race, gender, national origin, ancestry, age, color, religious creed, marital status, genetic information, sexual orientation, gender identity, gender expression, sex (including pregnancy, breast feeding and related medical conditions), mental or physical disability, medical conditions military and veteran status or any other status or condition protected by applicable federal, state, or local laws, governmental regulations