I have the requirement to execute a build agent on a machine that is outside the domain of the build controller. Is this possible and if so, is any extra configuration needed.
Yes you can, with the following conditions.
The domain that the build agent is in must trust the domain that the build controller is in
The build agent service account should be a member of the domain that the controller is in.