Staff Software Engineer: Agentic AI Security & Identity

CommBank; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

CommBank is seeking a Staff Software Engineer – Agentic AI Security to shape how AI agents are securely identified, authorised and governed across a large-scale identity ecosystem. This role blends hands-on engineering with technical leadership across identity services, AI agent architectures and enterprise security.

You will lead adoption patterns for agent identity, authentication and approvals, design controls to mitigate prompt injection and data leakage, and mentor engineers while guiding

Qualifications

• Hands-on expertise with Entra Agent ID and Agent 365.
• Strong knowledge of Entra ID, OAuth 2.0, OpenID Connect, service principals and workload identities.
• Experience designing enterprise identity lifecycle and governance for non-human identities.
• Applied understanding of agentic AI threats, threat modelling and secure deployment patterns.

Responsibilities

• Lead engineering adoption of Entra Agent ID and Agent 365 across the identity stack.
• Establish secure patterns for agent identity, authentication, authorisation and credentials.
• Design controls for prompt injection, excessive agency and data leakage.
• Apply Zero Trust and least privilege to agent architectures.
• Build and prototype secure agentic AI capabilities within Identity Services.
• Ensure agent activity is observable, auditable and governed.
• Provide hands-on technical leadership and mentor engineers.

Skills

Entra Agent ID

Agent 365

OAuth 2.0

OpenID Connect

Managed Identities

Workload Identities

APIs & SDKs

PowerShell

Python

Security Architecture

Identity Governance

Zero Trust

Threat Modelling

Tools

Microsoft Entra ID

Job description

CommBank is seeking a Staff Software Engineer – Agentic AI Security to shape how AI agents are securely identified, authorised and governed across a large-scale identity ecosystem. This role blends hands-on engineering with technical leadership across identity services, AI agent architectures and enterprise security.

You will lead adoption patterns for agent identity, authentication and approvals, design controls to mitigate prompt injection and data leakage, and mentor engineers while guiding