Atos
Atos
Atos provides digital transformation services and technology solutions for organizations across consulting, healthcare, logistics, and other industries. Its work spans cloud and infrastructure, digital business platforms, technology consulting, cybersecurity, user experience, and enterprise digital transformation. The company also supports major international events as an official IT partner, including UEFA and the Olympic Games, while advancing innovation and sustainability across its technology services.

AI Identity Service Architect Bangalore Onsite

Design identity architecture and governance for AI agents, including delegated authorization, agent lifecycles, and access controls. Join Atos in Bangalore to support secure, AI-enabled digital transformation services.

Description

  • Design identity and access management architectures for AI systems and agents
  • Architect and productize identity services, including reference architectures, platform evaluation and selection, and service definitions
  • Define AI agent identity lifecycles covering human sponsorship, declared scope, short-lived credential issuance, and revocation
  • Bring models, agents, and datasets under shared entitlement models and access certification processes
  • Design delegated authorization so user authority becomes agent authority through OAuth, token exchange, and on-behalf-of flows
  • Build or integrate production authorization systems, policy engines, authorization services, or token-level identity-provider integrations
  • Define policy-as-code controls for agent scopes and tool permissions
  • Apply identity controls to Model Context Protocol and agent frameworks
  • Enforce prompt-time entitlements through RAG retrieval scoping and permission filtering
  • Deploy AI gateways or prompt-control layers integrated with identity providers and entitlement models
  • Manage token issuance, conditional access, session controls, non-human identity governance, and workload identity

Requirements

  • Design-depth expertise in identity and access management architecture, including authentication, authorization, federation, lifecycle management, and governance for AI systems and agents
  • Experience architecting and productizing identity services, including reference architecture, platform evaluation and selection, and service definition
  • Hands-on experience with at least one of Microsoft Entra Agent ID, Okta Cross-App Access, SailPoint Agent Identity Security, or Cisco/Astrix
  • Experience applying shared entitlement models and access certification to models, agents, and datasets alongside applications through SailPoint ISC or Saviynt at registry and API level, with SCIM 2.0
  • Deep knowledge of OAuth 2.1, token exchange under RFC 8693, on-behalf-of flows, DPoP, mTLS, OIDC claims, and audience handling
  • Experience building or integrating an authorization system for production use
  • Experience implementing policy as code for agent scopes and tool permissions with OPA/Rego or Cedar
  • Knowledge of Model Context Protocol and agent frameworks, including identity assertions in tool calls, tool allow-listing, and per-task isolation
  • Experience deploying AI gateway or prompt-control layers integrated with an identity provider and entitlement model
  • Experience using Microsoft Entra ID or Okta for token issuance, conditional access, and session-level controls
  • Knowledge of non-human identity governance and SPIFFE/SPIRE workload identity
  • Service architecture experience across the specified areas
  • Protocol-level authorization experience and strong IAM architecture depth for Identity for AI
  • Helpful additional knowledge includes Microsoft, Google, AWS, and Anthropic agent and model platforms; sovereign model hosting such as Mistral and Aleph Alpha; OCSF telemetry modeling; EU AI Act human-oversight obligations; GDPR and works-council constraints; and AI security and MITRE ATLAS

Benefits

  • A workplace where diversity and inclusion are integral to Atos's culture
  • A commitment to maintaining a fair work environment
  • Organizational commitments to ESG and corporate social responsibility

Related Jobs

SPERTON - Where Great People Meet

Sales Executive, Elevators and Car Parking Systems

SPERTON - Where Great People Meet
51 – 200 Employees

Drive elevator and car parking system sales across Mumbai’s Western Region. Build client and dealer relationships, and manage deals from initial enquiry through project execution.

Open