One click makes a copy of your resume for this role, scores it against the posting, and proposes edits line by line. Your default resume is never changed.
Job match score for this posting
Edits you accept or skip, no invented facts
Download it when it reads right: TXT free, PDF with Premium
Build and automate secure agent identity and delegated-access capabilities, including identity lifecycle management, token exchange, federation, and least-privilege controls. Develop governed workspaces for people and AI agents, maintain end-to-end identity and auditability, and lead delivery through architecture, deployment, code reviews, and mentoring.
Job Description
As a Senior Engineer on Best Buy’s Applied AI & Build Standards team, you will help AI agents work safely alongside our employees as trusted, accountable participants. You’ll build two connected areas: agent identity (how an agent acts on a person’s behalf with only the access it needs, leaving a clear record) and the team/agent workspace (the governed spaces where people and agents work together). Our team, known internally as AI Rails, builds the shared platform and sets the build standards that let thousands of Best Buy engineers and technologists use AI agents with the right access, security and cost controls.
This role is remote-eligible: you can work virtually from home or another non-Best Buy location anywhere in the U.S., or hybrid at our corporate campus in Richfield, Minnesota. The specific work arrangements vary by role and team, and the recruiter or hiring manager will provide additional details during the hiring process.
This role is eligible for immigration sponsorship.
What you’ll do
Automate the agent identity lifecycle in Microsoft Entra ID, from passwordless agent accounts to approvals, credential rotation, revocation and decommissioning
Implement the identity contract our AI gateway enforces: token minting, on-behalf-of exchange and least-privilege scopes
Bridge agent identities into the SAML and OIDC federation most internal apps use, mapping on-premises groups to cloud scopes
Build the team/agent workspace: governed agent presence in collaboration tools, plus devboxes and cloud PCs, with test accounts kept apart from production
Carry user and agent identity end to end, from collaboration tools into immutable audit logs
Lead delivery from design through deployment, contribute to architecture decisions and make others better through code reviews and mentoring
Use Agentic AI as core development/coding tool
Basic qualifications
Bachelor's degree in IT, Computer Science, Engineering, or related field OR equivalent combination of education and/or experience
3 or more years of related work experience as a Software Engineer or Software Developer
2 or more years of engineering enterprise identity and access management, including OAuth 2.0, OpenID Connect and SAML
1 or more years of engineering experience with an enterprise identity provider such as Microsoft Entra ID, Okta or PingFederate
1 or more years of experience with development or automation in Python, C#, Go or a similar language
Hands-on experience, at work or on your own, giving AI agents their own identities or delegated access to real systems
Daily, hands-on use of AI coding agents in how you design, build and review software
Preferred qualifications
Bachelor's degree in IT, Computer Science, Engineering, or related field
5+ years of experience as a software engineer
Delegated authorization: OAuth 2.0 Token Exchange (RFC 8693) or on-behalf-of flows, with per-target, least-privilege tokens
Microsoft Entra ID in a hybrid Active Directory environment, including workload and agent identities
Managed cloud desktops or developer environments, such as Windows 365 Cloud PCs and Microsoft Intune
What’s in it for you We’re committed to helping our people thrive at work and at home. Best Buy offers a range of benefits to support your overall well-being and provide support as you need it, especially at key moments in your life.
Our benefits include:
Competitive pay
Great employee discount
Financial savings and retirement resources
Support for your physical and mental well-being
Best Buy provides different types of leaves of absence (LOA) and potential pay sources to employees based on eligibility. The length of your LOA depends on your situation, where you live, your full-time or part-time employment status, and federal and state regulations. Intermittent or reduced-schedule leave is also available for certain medical or family care leaves. Paid time off (vacation or PTO) is offered to full-time and part-time employees based on work location, employment status, salary or hourly status (exempt/non-exempt), and years of continued or bridged service.
Certain roles, where market norms demand it, are eligible for various forms of incentive pay to drive performance and offer recognition for achieving financial and strategic results. For more information about our incentive pay plans, including eligibility, please refer to our Incentive Programs Summary.
For more information about benefits, LOA and paid time off, please refer to our Benefits Guide.
About us As part of the Best Buy team, you’ll help us fulfill our purpose to enrich lives through technology. We bring that to life every day by humanizing and personalizing tech solutions for every stage of life — in our stores, online and in customers’ homes.
Our culture is built on deeply supporting and valuing our amazing employees who make it all possible. We’re committed to being a great place to work, where you can unlock unique career possibilities. Above all, we aim to provide a place where you can bring your full, authentic self to work now and into the future. Tomorrow works here.™
Best Buy is an equal opportunity employer.
Application deadline: Minimum of 5 days from the posting date. You can find that date above the job title at the top of the page.
“I was the first applicant for a remote marketing position that got listed on the company website the same day I applied. Had an interview within 48 hours!”
— Sarah J.
·
Marketing Manager
★★★★★
Verified
