Identity Engineer – Microsoft Entra & AI Platform

NTT DATA, Inc.; Sydney; On-site; AUD 103,000 - 165,000; Full time

Job summary

NTT DATA is seeking an Identity Engineer to support a major AI Platform build in Sydney, NSW. You will own identity requirements, authentication and authorisation patterns, workload identities, and security controls across Copilot Studio, AI agents, APIs, and cloud services.

The role is hands-on, requiring deep expertise in Microsoft Entra ID, OAuth2/OIDC, API security, and automation. Collaboration with architecture, security, and engineering teams is essential.

Qualifications

• Strong hands-on experience with Microsoft Entra ID within complex enterprise environments.
• Deep knowledge of app registrations, service principals, managed identities, and workload identity federation.
• Strong experience with OAuth 2.0 and OpenID Connect.
• Experience designing authentication and authorisation solutions for applications, APIs, workloads, or AI agents.
• Strong understanding of Conditional Access, PIM, identity governance, lifecycle management, and least-privilege access.
• Experience securing APIs and gateways using Azure API Management (APIM).
• Experience with Azure Key Vault, certificates, secrets, and key management.
• Strong identity automation and Infrastructure/Identity-as-Code experience.
• Experience with identity federation and custom token services.
• Understanding of Entra External ID and customer identity concepts.
• Experience integrating identity events with security monitoring or SOC platforms.
• Exposure to Copilot Studio, AI agents, or AI platform identity/security will be highly regarded.
• Strong stakeholder engagement and communication skills with the ability to work across architecture, engineering, security, and business teams.

Responsibilities

• Support the AI Platform Solution Architect in validating the overall identity design.
• Define and maintain identity requirements, technical decisions, dependencies, and security patterns.
• Design identity patterns across Copilot Studio, AI agents, engineered workloads, third-party platforms, and cloud services.
• Implement Identity-as-Code and identity automation across AI and cloud platforms.
• Define authentication, delegated identity, app-role, permission, and consent models.
• Configure and govern Microsoft Entra controls including Conditional Access, PIM, attributes, access packages, and lifecycle controls.
• Design and implement app registrations, service principals, managed identities, and workload identity federation.
• Secure API Management gateways using token validation and appropriate access policies.
• Support identity federation and custom token-service integration with third-party platforms.
• Manage secrets, keys, and certificates using Azure Key Vault.
• Validate identity patterns through AI agent implementations and acceptance testing.
• Establish identity governance, ownership models, monitoring, and transition into BAU support.

Skills

Microsoft Entra ID

Workload identities

OAuth 2.0

OpenID Connect

API security

Azure Key Vault

Azure API Management

Identity automation

Identity federation

Conditional Access

PIM

Security governance

Entra External ID

AI platform security

Stakeholder engagement

Job description

Role Title: Identity Engineer – Microsoft Entra & AI Platform

Location: Sydney, NSW

Start Date: ASAP

Duration: 6 Month Contract with high possibility of extension. (Full-time for the first 1.5 months, then part-time approx 2.5 days per week for the remaining 4.5 months).

NTT DATA is seeking an experienced Identity Engineer with deep expertise in Microsoft Entra ID, workload identities, authentication, and AI platform security to support a major AI Platform build.

This role will work closely with the AI Platform Solution Architect to design, validate, and implement secure identity patterns across Copilot Studio, AI agents, APIs, third-party platforms, and cloud services.

You will take ownership of identity requirements, authentication and authorisation patterns, workload identities, security controls, and identity automation across the platform. This is a hands-on engineering role suited to someone who combines strong Microsoft Entra expertise with modern application identity, OAuth, API security, and automation experience.

Is innovation part of your DNA? Do you want to enable a connected future for people, organizations, and society?

Join our growing global NTT team and you’ll be part of the world’s largest ICT company (by revenue). We’ve combined the capabilities of 28 remarkable companies to become one, leading technology services provider. Together, we help our people, clients, and communities do great things with technology to create a more secure and connected future. We employ 40,000 people across 57 countries. By bringing together the world’s best technology companies and emerging innovators, we work together to deliver sustainable outcomes to businesses and the world. Innovation is part of our DNA. We believe it’s key to what makes us different. So, we strive to move forward, challenge the status quo, and drive excellence through the technologies we integrate and the services we deliver around the world. The result is connected cities, connected factories, connected healthcare, connected agriculture, connected conservation, connected mobility, and connected sport. Together we enable the connected future.

Key Responsibilities

• Support the AI Platform Solution Architect in validating the overall identity design.
• Define and maintain identity requirements, technical decisions, dependencies, and security patterns.
• Design identity patterns across Copilot Studio, AI agents, engineered workloads, third-party platforms, and cloud services.
• Implement Identity-as-Code and identity automation across AI and cloud platforms.
• Define authentication, delegated identity, app-role, permission, and consent models.
• Configure and govern Microsoft Entra controls including Conditional Access, PIM, attributes, access packages, and lifecycle controls.
• Design and implement app registrations, service principals, managed identities, and workload identity federation.
• Secure API Management gateways using token validation and appropriate access policies.
• Support identity federation and custom token-service integration with third-party platforms.
• Manage secrets, keys, and certificates using Azure Key Vault.
• Validate identity patterns through AI agent implementations and acceptance testing.
• Establish identity governance, ownership models, monitoring, and transition into BAU support.

Skills & Experience

• Strong hands-on experience with Microsoft Entra ID within complex enterprise environments.
• Deep knowledge of app registrations, service principals, managed identities, and workload identity federation.
• Strong experience with OAuth 2.0 and OpenID Connect.
• Experience designing authentication and authorisation solutions for applications, APIs, workloads, or AI agents.
• Strong understanding of Conditional Access, PIM, identity governance, lifecycle management, and least-privilege access.
• Experience securing APIs and gateways using Azure API Management (APIM).
• Experience with Azure Key Vault, certificates, secrets, and key management.
• Strong identity automation and Infrastructure/Identity-as-Code experience.
• Experience with identity federation and custom token services.
• Understanding of Entra External ID and customer identity concepts.
• Experience integrating identity events with security monitoring or SOC platforms.
• Exposure to Copilot Studio, AI agents, or AI platform identity/security will be highly regarded.
• Strong stakeholder engagement and communication skills with the ability to work across architecture, engineering, security, and business teams.