Senior Staff Engineer, Agentic AI Security & Identity

Commonwealth Bank; Melbourne; On-site; AUD 180,000 - 240,000; Full time

Job summary

CommBank is seeking a Staff Software Engineer – Agentic AI Security in Melbourne to define how identity services securely adopt agentic AI. You will set technical direction for agent registration, authentication, authorisation, and governance while remaining hands-on in designing, prototyping and implementing secure solutions.

You will work across AI agent architectures, APIs and enterprise identity capabilities to establish practical engineering patterns that protect credentials, privileged

Qualifications

• Hands-on expertise with Microsoft Entra ID for Agents (Entra Agent ID) and Microsoft Agent 365, or comparable agent identity and governance platforms.
• Strong knowledge of Microsoft Entra ID, OAuth 2.0, OpenID Connect, application identities, service principals, managed identities and workload identities.
• Experience designing enterprise identity lifecycle and governance patterns for non-human identities.
• Applied understanding of agentic AI threats, threat modelling, trust boundaries, sandboxing, tool allow-listing, permission scoping and secure handling of untrusted content.
• Understanding of secure delegation, token exchange and emerging agent identity approaches such as AI Identity Management System (AIMS).
• Familiarity with Microsoft 365 Copilot, Copilot Studio agents, Microsoft Graph permissions, connectors or MCP-style tool integrations.
• Practical PowerShell, Python or similar coding skills, with confidence working across APIs, SDKs and configuration-as-code.
• The technical leadership skills to influence engineering direction, mentor others and take ownership of complex strategic initiatives.

Responsibilities

• Lead engineering adoption of Microsoft Entra ID for Agents (Entra Agent ID) and Microsoft Agent 365, including agent registration, ownership, permissions, inventory, visibility and lifecycle controls.
• Establish secure engineering patterns for agent identity, authentication, authorisation, secrets, tool access and privileged operations.
• Design controls for prompt injection, excessive agency, unsafe tool use, credential exposure, privilege escalation and data leakage.
• Apply Zero Trust, least privilege, identity isolation, scoped permissions, short-lived credentials and human approval to agent architectures.
• Build and prototype secure agentic AI capabilities that improve Identity Services engineering and operational workflows.
• Ensure agent activity is observable, attributable, auditable and appropriately governed.
• Provide hands-on technical leadership, mentoring engineers and simplifying or retiring obsolete architecture.
• Shape the technical roadmap for agentic AI, automation and identity engineering within Identity Services.

Skills

Entra ID for Agents

OAuth 2.0

OpenID Connect

Agentic AI security

PowerShell

Python

APIs & SDKs

Tools

Entra Agent ID

Microsoft Agent 365

Job description

CommBank is seeking a Staff Software Engineer – Agentic AI Security in Melbourne to define how identity services securely adopt agentic AI. You will set technical direction for agent registration, authentication, authorisation, and governance while remaining hands-on in designing, prototyping and implementing secure solutions.

You will work across AI agent architectures, APIs and enterprise identity capabilities to establish practical engineering patterns that protect credentials, privileged