Staff Software Engineer: Agentic AI Security & Identity

Commonwealth Bank; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

Commonwealth Bank is seeking a Staff Software Engineer to lead the security of agentic AI identities within a large-scale enterprise environment. You will shape how agents are securely identified, authenticated, and governed while staying hands-on in design, prototyping and implementation.

You’ll work across AI agent architectures, APIs and identity capabilities to establish practical engineering patterns that protect credentials, privileged access and enterprise data, while mentoring engineers

Qualifications

• HHands-on expertise with Entra ID for Agents and Entra Agent ID.
• Knowledge of OAuth 2.0, OpenID Connect and workload identities.
• Experience designing enterprise identity lifecycle and governance for non-human identities.
• Applied understanding of agentic AI threats and secure handling of untrusted content.

Responsibilities

• Lead engineering adoption of Entra Agent ID and Agent 365 across Identity Services.
• Design secure identity patterns for agent authentication, authorisation and secrets.
• Design controls for prompt injection, credential exposure and data leakage.
• Provide hands-on technical leadership and mentor engineers on complex initiatives.
• Shape the technical roadmap for agentic AI, automation and identity engineering.

Skills

Agent identity engineering

Security architecture

Identity governance

Mentoring / technical leadership

APIs & integration

PowerShell

Python

Cloud security

Tools

Microsoft Entra ID for Agents (Entra Agent ID)

Microsoft Agent 365

OAuth 2.0

OpenID Connect

Microsoft Graph

Configuration-as-code

APIs & SDKs

Job description

Commonwealth Bank is seeking a Staff Software Engineer to lead the security of agentic AI identities within a large-scale enterprise environment. You will shape how agents are securely identified, authenticated, and governed while staying hands-on in design, prototyping and implementation.

You’ll work across AI agent architectures, APIs and identity capabilities to establish practical engineering patterns that protect credentials, privileged access and enterprise data, while mentoring engineers