Role-NHI & AI Agent Identity Security Engineer Microsoft Entra ID / Microsoft Agentic Identities IDP / Crowd Strike Agentic Identity IDP / KONG AI Gateway

Work location- Bangalore - Work from office - 5 days

Role Summary

Protect workload identities in Microsoft Entra (application registrations, service principals, and managed identities) and AI agent identities using Microsoft Entra Agent ID. Focus on removing long-lived credentials, limiting permissions, and detecting misuse, while keeping the operating model lightweight and largely automated.

Key Responsibilities

- Discover and baseline non-human and agent identities, including owners, permissions, credentials, and usage.
- Replace secrets with managed identities and workload identity federation wherever feasible.
- Enforce least privilege on Microsoft Graph and API permissions; tighten app consent policies.
- Protect organization-owned workload identities by using Microsoft Entra ID Protection to detect risky service principals and blocking them via Conditional Access.
- Define and implement identity, authentication, access, and MCP security guardrails for AI agents built on Microsoft platforms (e.g. Microsoft Foundry, Copilot Studio), including secure tool access, least-privilege permissions, and token protection.
- Implement Microsoft Entra Agent ID protection controls (Conditional Access and ID Protection for agents),



run POCs on preview agent identity features, and recommend adoption based on security value and operational effort.
- Automate detection of stale, orphaned, over-privileged, or credential-expiring identities, with automated or guided remediation.
- Provide backup cover for Entra ID workforce protection controls.

Required Skills >> Microsoft Entra ID and Microsoft Agent Entra ID

- 7 10 years of IAM, cloud security experience.
- Hands-on experience with Entra application registrations, service principals, managed identities, and workload identity federation.
- Solid understanding of OAuth 2.0 flows, client credentials, certificates, and token handling.
- Experience securing workloads in Azure; working knowledge of AWS IAM.
- Scripting and API automation using Power Shell, Python, or Microsoft Graph.

Preferred Skills

- Hands-on exposure to building or securing AI agents (e.g. Microsoft Foundry, Copilot Studio, or similar).
- Familiarity with secrets management (e.g. Azure Key Vault) and CI/CD pipeline identity.
- Awareness of AI-specific identity risks such as excessive agent permissions, prompt injection leading to misuse of access, and delegated access abuse.
- Exposure to dedicated NHI security platforms.
- Exposure to Kong AI Gateway
- Awareness of Crowd Strike agentic IdP

📌 NHI & AI Agent Identity Security Engineer(Microsoft Entra ID) (India)
🏢 Cyberidentitysolutions
📍 India