Senior Identity Security Engineer - Microsoft Agent 365

Overview MajorKey Technologies is seeking a hands-on Senior Microsoft Agent 365 Security Engineer to implement and validate Microsoft Agent 365 solutions for enterprise customers. Working from an approved architecture, defined requirements, and an implementation plan, this individual will configure the Agent 365 registry, onboard in-scope agents, implement agent identity and access controls, configure supporting Microsoft security and compliance capabilities, execute pilot scenarios, troubleshoot technical issues, and prepare operational documentation. The ideal candidate has strong Microsoft Entra ID and Microsoft 365 security engineering experience, practical knowledge of Microsoft Agent 365, and familiarity with AI agents built through Microsoft 365 Copilot, Copilot Studio, third-party platforms, or custom frameworks. This is a client-facing consulting role that requires independent technical execution, disciplined testing and documentation, and effective collaboration with the solution architect, customer administrators, security teams, and project management. Key Responsibilities Implement approved Microsoft Agent 365 designs, configuration standards, and deployment plans. Validate documented prerequisites and record technical readiness findings for review by the solution architect. Configure and administer the Agent 365 registry for in-scope agents. Discover, inventory, classify, register, and onboard in-scope agents using supported Microsoft administration, SDK, or CLI methods as defined by the project. Create and associate agent identity blueprints and agent identities according to the approved identity and ownership model. Assign defined agent owners and sponsors and validate agent permissions and least-privilege access. Configure specified Microsoft Entra controls for agents, including Conditional Access, Identity Protection, entitlement management, access packages, access reviews, or lifecycle workflows when included in the approved design. Configure and validate specified Microsoft Purview controls for agents and AI applications, including sensitivity labels, Data Loss Prevention, audit, and related data protection policies when included in scope. Configure and validate specified Microsoft Defender capabilities for agent security posture, threat detection, investigation, and response when included in scope. Support configuration and validation of applicable Microsoft Intune and Microsoft 365 administrative controls. Execute defined pilot scenarios, test cases, and acceptance criteria, and capture clear implementation and validation evidence. Review agent sign-ins, audited activities, telemetry, dashboards, alerts, and other operational data required by the approved test plan. Troubleshoot configuration, integration, permission, onboarding, and policy-enforcement issues. Escalate architecture decisions, ambiguous requirements, scope questions, product limitations, and material delivery risks to the solution architect and Project Manager. Develop accurate as-built documentation, configuration records, test results, administrator procedures, support procedures, and operational runbooks. Provide technical demonstrations and knowledge transfer to customer administrators, security operations personnel, and support teams. Provide technical guidance to supporting engineers while remaining accountable for the quality of assigned implementation work. Required Skills & Experience 5+ years of experience implementing Microsoft identity, Microsoft 365 security, or cloud security solutions in enterprise environments. Hands-on experience with Microsoft Entra ID, including application registrations, enterprise applications, service principals, authentication, Conditional Access, Identity Protection, permissions, and least-privilege access. Hands-on Microsoft Agent 365 experience, including the Agent 365 registry, agent discovery and inventory, agent identity blueprints, agent identities, owner and sponsor assignment, permissions, and agent lifecycle administration. Experience implementing Microsoft Entra ID Governance capabilities such as entitlement management, access packages, access reviews, and lifecycle workflows. Working experience with Microsoft Purview capabilities such as sensitivity labels, Data Loss Prevention, audit, and investigation of data activity. Working experience with Microsoft Defender capabilities relevant to AI agents and applications, including security posture, alert review, investigation, and response integration. Experience administering Microsoft 365 through the Microsoft 365 admin center, Microsoft Entra admin center, Microsoft Defender portal, Microsoft Purview portal, and Microsoft Intune admin center. Familiarity with Microsoft 365 Copilot and Copilot Studio agent architecture, permissions, connectors, data access, publishing, and governance controls. Ability to follow approved designs and implementation plans while identifying technical conflicts, missing prerequisites, and deployment risks. Ability to produce clear technical documentation, configuration records, test scripts, test evidence, and operational runbooks. Strong troubleshooting, analytical, communication, and client-facing consulting skills. Preferred Qualifications Experience onboarding agents to Microsoft Agent 365 through supported administrative interfaces, SDKs, or command-line tools. Familiarity with the Agent 365 CLI, Azure CLI, tenant prerequisites, Azure prerequisites, and agent registration paths. Understanding of agent observability, telemetry collection, dashboards, events, and alert validation. Familiarity with Model Context Protocol, governed MCP-connected services, connectors, and agent-to-resource access patterns. Experience using PowerShell and Microsoft Graph for Entra, Microsoft 365, security, inventory, reporting, or validation tasks. Working knowledge of one or more agent technology stacks such as .NET, Python, Node.js, Azure AI Foundry, Microsoft Agent Framework, or comparable platforms. Deep custom development experience is required only when explicitly included in the role or project scope. Experience working in enterprise consulting or professional services environments. Microsoft certifications such as SC-300, SC-100, SC-200, SC-400, AZ-500, or relevant Microsoft Applied Skills for Copilot, agents, security, or compliance. Role Expectations Own hands-on execution and quality for assigned Agent 365 implementation workstreams. Work effectively across identity, security, compliance, endpoint, Microsoft 365, and AI platform teams. Identify and escalate licensing, tenant-readiness, integration, agent-discovery, ownership, permissions, and product-maturity risks early with supporting technical evidence. Perform work within the approved solution design, project scope, delivery plan, and acceptance criteria. Maintain accurate implementation records and communicate progress, blockers, dependencies, and risks to the solution architect and Project Manager. Balance Microsoft-recommended practices with the approved customer design and practical delivery constraints. MajorKey Technologies - Privacy Policy Equal Opportunity Employer Disability/Veteran