Senior Staff Engineer: Agentic AI Security & Identity

Junee Southern Cross; Melbourne; Remote; AUD 180,000 - 240,000; Full time

Job summary

Commonwealth Bank in Melbourne seeks a Staff Software Engineer for Agentic AI Security to define how agents are identified and governed within a large-scale identity ecosystem. You will stay hands-on while leading security-driven design across agent architectures and APIs.

The role demands expertise in identity engineering, agent security, and practical implementation of enterprise controls to protect credentials, privileged access, data and security boundaries.

Qualifications

• Hands-on identity engineering expertise with real-world AI agent security risk knowledge.
• Experience designing enterprise identity lifecycle for non-human identities.
• Ability translate security concepts into practical engineering controls.

Responsibilities

• Lead engineering adoption of Entra Agent ID and Agent 365, including registration, ownership, permissions, inventory, visibility and lifecycle controls.
• Establish secure patterns for agent identity, authentication, authorisation, secrets and privileged operations.
• Design controls for prompt injection, excessive agency, unsafe tool use and data leakage.
• Apply Zero Trust, least privilege, identity isolation and short-lived credentials to agent architectures.
• Build and prototype secure agentic AI capabilities improving Identity Services workflows.
• Ensure agent activity is observable, attributable, auditable and governed.
• Provide hands-on technical leadership, mentoring engineers and simplifying obsolete architecture.
• Shape the technical roadmap for agentic AI and identity engineering.

Skills

Agent identity governance

Entra ID for Agents

OAuth 2.0

OpenID Connect

PowerShell

Python

APIs & SDKs

Security architecture

Technical leadership

Tools

Entra Agent ID

Microsoft 365 Copilot

Job description

Commonwealth Bank in Melbourne seeks a Staff Software Engineer for Agentic AI Security to define how agents are identified and governed within a large-scale identity ecosystem. You will stay hands-on while leading security-driven design across agent architectures and APIs.

The role demands expertise in identity engineering, agent security, and practical implementation of enterprise controls to protect credentials, privileged access, data and security boundaries.