Are you an experienced Tech Lead with Azure API Management and Entra ID token exchange expertise?

emagine has an opportunity for you to drive the integration of a private AI governance gateway with business platforms such as Copilot Studio, SAP and Salesforce, working with a global team.

Skills and Experience

  • 6+ years in cloud or integration engineering, with prior tech lead or architecture responsibility

  • Azure API Management (policies, products, private networking), Application Gateway, Key Vault and managed identities

  • Microsoft Entra ID, OAuth 2.0 / OIDC, on-behalf-of and token exchange flows, app registrations and consent

  • Solid understanding of the Model Context Protocol (MCP) and its authorization model, including OAuth 2.1, RFC 8693, RFC 9728, RFC 8707 and RFC 7591

  • REST, OpenAPI, OWASP API security and versioning

  • Infrastructure as code (Bicep or Terraform) and CI/CD

  • Business-fluent English and the ability to align security, network and business platform teams

  • Nice to have: Copilot Studio / Power Platform, SAP or Salesforce integration (JWT Bearer, principal propagation), AI agents and Azure AI Foundry

Tasks and Deliverables

  • Design and deliver private, governed access to the AI gateway from Copilot Studio across production and sandbox environments

  • Define reusable onboarding patterns for SAP, Salesforce and future consumers (connectivity, authentication, products, quotas)

  • Industrialize per-user token exchange so AI agents access third-party systems as the signed-in user

  • Run proof-of-concepts with platform teams and validate trust models with Cybersecurity and IAM

  • Build new API Management policies and strengthen security (least privilege, Defender for APIs, content safety, prompt and SQL injection protection)

  • Produce integration patterns, architecture decision records and onboarding guides so new projects connect without bespoke work

Why this role

  • Shape the foundation of a live, production-grade enterprise AI platform

  • Real ownership of technical direction, working with cutting-edge AI and security topics

  • Work with a collaborative, enabling team that values autonomous, self-starting professionals

Other details

  • Location: Fully remote

  • Contract: minimum 3 months

  • Start: ASAP

Apply with your latest CV or reach out to Brendan to find out more.