Security Engineer, Agentic AI & Identity

Make your mark at Comcast – a Fortune 30 global media and technology company. From the connectivity and platforms we provide, to the content and experiences we create, we reach hundreds of millions of customers, viewers, and guests worldwide. Become part of our award-winning technology team that turns big ideas into cutting‑edge products, platforms, and solutions that our customers love. We create space to innovate, and we recognize, reward, and invest in your ideas, while ensuring you can proudly bring your authentic self to the workplace.

Join us. You’ll do the best work of your career right here at Comcast. (In most cases, Comcast prefers to have employees on-site collaborating unless the team has been designated as virtual due to the nature of their work. If a position is listed with both office locations and virtual offerings, Comcast may be willing to consider candidates who live greater than 100 miles from the office for the remote option.)

This role is responsible for driving the strategy, design, implementation, and operational support of enterprise AI Identity and Access Management solutions, while advancing identity security capabilities for modern cloud, API, and Agentic AI ecosystems. The position serves as a subject matter expert for authentication, federation, workload identities, Zero Trust architecture, and secure AI agent interactions across multi‑cloud environments.

• Architect, deploy, and maintain Microsoft Entra l Access Policies, including risk‑based access controls, workload identities, and Zero Trust security controls.
• Develop and manage secure identity solutions for users, applications, APIs, workloads, and AI agents across hybrid and multi‑cloud environments.
• Design and implement Agent Identity frameworks utilizing Agent IDs, Workload Identity Federation, SPIFFE/SPIRE, service principals, and machine‑to‑machine authentication mechanisms.
• Partner with security, platform, and application teams to integrate identity controls into Agentic AI solutions leveraging MCP, RAG, A2A communications, LLMs, Lang Chain, Lang Graph, Semantic Kernel, and related technologies.
• Establish and enforce Zero Trust security principles across enterprise applications, APIs, cloud workloads, and AI‑driven systems.
• Evaluate, troubleshoot, and resolve complex authentication, authorization, federation, and application access issues across enterprise environments.
• Design secure authentication and authorization architectures for modern applications and APIs, incorporating token‑based security and identity best practices.
• Implement IAM automation and operational efficiencies through Power Shell, Python, Microsoft Graph APIs, REST APIs, Terraform, and Infrastructure as Code practices.
• Collaborate with cloud engineering teams to integrate identity platforms across Azure, AWS, and GCP environments.
• Develop and maintain identity architecture standards, security patterns, implementation guides, and operational procedures.
• Create technical documentation, workflows, architecture diagrams, and knowledge articles using Markdown, Mermaid, and related documentation tools.
• Monitor emerging technologies and industry trends within Identity Security, Agentic AI, and cloud security, driving adoption of innovative capabilities where appropriate.
• Participate in security reviews, threat modeling exercises, and architecture governance processes to ensure compliance with enterprise security requirements.

• 5+ years of IAM experience
  , with a strong focus on authentication, federation, application onboarding, access management, and identity security in enterprise environments.
• Hands‑on experience designing, implementing, and troubleshooting Microsoft Entra l Access…