Identity Engineer: Entra & AI Platform

NTT DATA Deutschland; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

NTT DATA Deutschland is seeking an Identity Engineer to design, validate, and implement secure identity patterns across Copilot Studio, AI agents, APIs, and cloud services. The role focuses on Microsoft Entra ID, workload identities, authentication, and AI platform security, with hands-on engineering experience.

You will own identity requirements, security controls, and automation, collaborating with the AI Platform Solution Architect to deliver secure identity patterns in a complex enterprise

Qualifications

• Hands-on experience with Microsoft Entra ID in complex enterprise environments.
• Deep knowledge of app registrations, service principals, managed identities, and workload identity federation.
• Strong experience with OAuth 2.0 and OpenID Connect.
• Experience designing authn/authz solutions for apps, APIs, workloads, or AI agents.
• Understanding of Conditional Access, PIM, identity governance, lifecycle management, and least-privilege access.
• Experience securing APIs and gateways with Azure API Management.
• Experience with Azure Key Vault, certificates, secrets, and key management.
• Experience with identity automation and Infrastructure/Identity-as-Code.
• Knowledge of Entra External ID and customer identity concepts.
• Experience integrating identity events with security monitoring or SOC platforms.

Responsibilities

• Support the AI Platform Solution Architect in validating the overall identity design.
• Define and maintain identity requirements, technical decisions, dependencies, and security patterns.
• Design identity patterns across Copilot Studio, AI agents, workloads, third-party platforms, and cloud services.
• Implement Identity-as-Code and identity automation across AI and cloud platforms.
• Define authentication, delegated identity, app-role, permission, and consent models.
• Configure and govern Microsoft Entra controls including Conditional Access, PIM, attributes, access packages, and lifecycle controls.
• Design and implement app registrations, service principals, managed identities, and workload identity federation.
• Secure API Management gateways using token validation and appropriate access policies.
• Support identity federation and custom token-service integration with third-party platforms.
• Manage secrets, keys, and certificates using Azure Key Vault.
• Validate identity patterns through AI agent implementations and acceptance testing.
• Establish identity governance, ownership models, monitoring, and transition into BAU support.

Skills

Microsoft Entra ID

Workload identities

Authentication

AI platform security

OAuth 2.0

OpenID Connect

Conditional Access

PIM

Azure Key Vault

Identity automation

Federation

Copilot Studio

Tools

Azure API Management

Azure Key Vault

Copilot Studio

Job description

NTT DATA Deutschland is seeking an Identity Engineer to design, validate, and implement secure identity patterns across Copilot Studio, AI agents, APIs, and cloud services. The role focuses on Microsoft Entra ID, workload identities, authentication, and AI platform security, with hands-on engineering experience.

You will own identity requirements, security controls, and automation, collaborating with the AI Platform Solution Architect to deliver secure identity patterns in a complex enterprise