{"id":3413972,"url":"https://alion.io/job/mphasis-agentic-ai-identity-and-authorization-engineer","title":"Agentic AI Identity and Authorization Engineer","company":{"id":59446,"name":"Mphasis","domain":"mphasis.com","url":"https://alion.io/company/mphasis","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"RippleHire","truth_index":{"grade":"B","score":82,"open_postings":23,"ghost_share":0,"stale_share":0.739,"repost_share":0,"time_to_fill_p50_days":35,"computed_at":"2026-11-03T05:54:40Z"}},"role":"AI/ML","role_family":"AI/ML","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":120000,"max_usd":231000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1332},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Postman","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Azure","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-10-26T00:00:00Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-03T23:50:25Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"Job Description: Agentic AI Identity and Authorization Engineer\nJob Title: Senior Identity and Authorization Engineer - Agentic AI\nKey Skills: Microsoft Entra ID, OAuth 2.0, OIDC, SAML, API Security\nLocation: Columbus, OH, USA\nExperience: 8+ years in IAM engineering with hands-on identity and API security experience\nRole Summary\nThe Agentic AI Identity and Authorization Engineer will design, implement and troubleshoot secure identity and delegated authorization patterns for enterprise AI agents and downstream APIs. The role requires strong hands-on Microsoft Entra ID engineering, protocol-level knowledge of OAuth 2.0, OpenID Connect and SAML, and practical automation skills across Microsoft Graph, REST APIs, PowerShell and Python.\nKey Responsibilities\n··Engineer Microsoft Entra ID configurations for enterprise applications, app registrations, service principals, permissions, consent, groups and app roles.\n·Implement and validate OAuth 2.0, OpenID Connect and SAML authentication and authorization flows, including authorization code and client credentials flows.\n·Design and implement API security and delegated authorization patterns, including On-Behalf-Of, token exchange, least-privilege access and downstream API authorization.\n·Configure and validate JWTs, scopes, claims, delegated permissions, application permissions and token-validation requirements.\n·Develop automation and integration utilities using PowerShell, Python, REST APIs, Microsoft Graph and Postman.\n·Troubleshoot complex authentication and authorization issues using Entra sign-in logs, audit logs, token claims, correlation IDs and API responses.\n·Partner with AI platform, security and application engineering teams to embed secure identity patterns into Agentic AI solutions.\n··Create implementation documentation, test evidence and technical guidance for supported identity and authorization patterns.\nRequired Skills and Experience\n·8+ years of IAM engineering experience, including strong hands-on Microsoft Entra ID expertise.\n·Deep experience with enterprise applications, app registrations, service principals, permissions, consent, groups and app roles.\n·Advanced knowledge of OAuth 2.0, OpenID Connect and SAML, including authorization code flow, client credentials, JWTs, scopes, claims and token validation.\n··Hands-on experience with delegated authorization, On-Behalf-Of, token exchange, least privilege and downstream API authorization.\n··Strong scripting and API integration skills using PowerShell, Python, REST APIs, Microsoft Graph and Postman.\n·Proven ability to troubleshoot authentication and authorization flows using Entra sign-in logs, audit logs, token contents and correlation IDs.\n·Strong understanding of API security, workload identities, application identities and secure machine-to-machine access patterns.\nPreferred Experience\n·Identity and authorization engineering for Generative AI or Agentic AI solutions.\n·Experience securing AI agents, non-human identities, workload identities or service-to-service interactions.\n·Familiarity with Zero Trust, policy-based authorization and enterprise API gateways.\n·Microsoft Identity and Access Administrator Associate, Azure Security Engineer Associate, or comparable IAM/security certification.","description_format":"text","description_chars":3279,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Business Process Outsourcing (BPO)","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-28T18:44:48Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1,327 · green card filings: 215","filings_12m":1327,"filings_prev_12m":1471,"green_card_filings_12m":215,"median_offered_wage_usd":122500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":237}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":8,"expected_fill_days":35,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/mphasis-agentic-ai-identity-and-authorization-engineer","json_url":"https://alion.io/job/mphasis-agentic-ai-identity-and-authorization-engineer.json","meta":{"generated_at":"2026-11-04T01:09:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1753,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":59446},"rest":"https://alion.io/mcp/rest/get_company?id=59446"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmphasis-agentic-ai-identity-and-authorization-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmphasis-agentic-ai-identity-and-authorization-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmphasis-agentic-ai-identity-and-authorization-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mphasis-agentic-ai-identity-and-authorization-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmphasis-agentic-ai-identity-and-authorization-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3413972}},{"tool":"search_jobs","arguments":{"company":"mphasis.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3413972},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}