Identity Engineer - Entra & AI Platform Security

NTT DATA, Inc.; Sydney; On-site; AUD 103,000 - 165,000; Full time

Job summary

NTT DATA is seeking an Identity Engineer to support a major AI Platform build in Sydney, NSW. You will own identity requirements, authentication and authorisation patterns, workload identities, and security controls across Copilot Studio, AI agents, APIs, and cloud services.

The role is hands-on, requiring deep expertise in Microsoft Entra ID, OAuth2/OIDC, API security, and automation. Collaboration with architecture, security, and engineering teams is essential.

Qualifications

• Strong hands-on experience with Microsoft Entra ID within complex enterprise environments.
• Deep knowledge of app registrations, service principals, managed identities, and workload identity federation.
• Strong experience with OAuth 2.0 and OpenID Connect.
• Experience designing authentication and authorisation solutions for applications, APIs, workloads, or AI agents.
• Strong understanding of Conditional Access, PIM, identity governance, lifecycle management, and least-privilege access.
• Experience securing APIs and gateways using Azure API Management (APIM).
• Experience with Azure Key Vault, certificates, secrets, and key management.
• Strong identity automation and Infrastructure/Identity-as-Code experience.
• Experience with identity federation and custom token services.
• Understanding of Entra External ID and customer identity concepts.
• Experience integrating identity events with security monitoring or SOC platforms.
• Exposure to Copilot Studio, AI agents, or AI platform identity/security will be highly regarded.
• Strong stakeholder engagement and communication skills with the ability to work across architecture, engineering, security, and business teams.

Responsibilities

• Support the AI Platform Solution Architect in validating the overall identity design.
• Define and maintain identity requirements, technical decisions, dependencies, and security patterns.
• Design identity patterns across Copilot Studio, AI agents, engineered workloads, third-party platforms, and cloud services.
• Implement Identity-as-Code and identity automation across AI and cloud platforms.
• Define authentication, delegated identity, app-role, permission, and consent models.
• Configure and govern Microsoft Entra controls including Conditional Access, PIM, attributes, access packages, and lifecycle controls.
• Design and implement app registrations, service principals, managed identities, and workload identity federation.
• Secure API Management gateways using token validation and appropriate access policies.
• Support identity federation and custom token-service integration with third-party platforms.
• Manage secrets, keys, and certificates using Azure Key Vault.
• Validate identity patterns through AI agent implementations and acceptance testing.
• Establish identity governance, ownership models, monitoring, and transition into BAU support.

Skills

Microsoft Entra ID

Workload identities

OAuth 2.0

OpenID Connect

API security

Azure Key Vault

Azure API Management

Identity automation

Identity federation

Conditional Access

PIM

Security governance

Entra External ID

AI platform security

Stakeholder engagement

Job description

NTT DATA is seeking an Identity Engineer to support a major AI Platform build in Sydney, NSW. You will own identity requirements, authentication and authorisation patterns, workload identities, and security controls across Copilot Studio, AI agents, APIs, and cloud services.

The role is hands-on, requiring deep expertise in Microsoft Entra ID, OAuth2/OIDC, API security, and automation. Collaboration with architecture, security, and engineering teams is essential.