Staff Engineer: Agentic AI Security & Identity

Johnson Electric Group; Stratford; On-site; CAD 140,000 - 180,000; Full time

Job summary

CommBank is seeking a Staff Software Engineer to lead the secure adoption of agentic AI identity capabilities. You will define how agents are identified, authenticated and governed while remaining hands-on in prototyping and implementing secure solutions.

You'll drive architecture across AI agent identities, APIs and enterprise identity capabilities to protect credentials, access and data, shaping security boundaries and practical engineering patterns for enterprise services.

Qualifications

• Hands-on expertise with Microsoft Entra ID for Agents (Entra Agent ID) and Microsoft Agent 365.
• Strong knowledge of Microsoft Entra ID, OAuth 2.0, OpenID Connect, application identities, service principals, managed identities and workload identities.
• Experience designing enterprise identity lifecycle and governance patterns for non-human identities.
• Applied understanding of agentic AI threats, threat modelling, trust boundaries, sandboxing, tool allow-listing, permission scoping and secure handling of untrusted content.
• Understanding of secure delegation, token exchange and emerging agent identity approaches such as AI Identity Management System (AIMS).
• Familiarity with Microsoft 365 Copilot, Copilot Studio agents, Microsoft Graph permissions, connectors or MCP-style tool integrations.
• Practical PowerShell, Python or similar coding skills, with confidence working across APIs, SDKs and configuration-as-code.
• The technical leadership skills to influence engineering direction, mentor others and take ownership of complex strategic initiatives.

Responsibilities

• Lead engineering adoption of Microsoft Entra ID for Agents (Entra Agent ID) and Microsoft Agent 365, including agent registration, ownership, permissions, inventory, visibility and lifecycle controls.
• Establish secure engineering patterns for agent identity, authentication, authorisation, secrets, tool access and privileged operations.
• Design controls for prompt injection, excessive agency, unsafe tool use, credential exposure, privilege escalation and data leakage.
• Apply Zero Trust, least privilege, identity isolation, scoped permissions, short-lived credentials and human approval to agent architectures.
• Build and prototype secure agentic AI capabilities that improve Identity Services engineering and operational workflows.
• Ensure agent activity is observable, attributable, auditable and appropriately governed.
• Provide hands-on technical leadership, mentoring engineers and simplifying or retiring obsolete architecture.
• Shape the technical roadmap for agentic AI, automation and identity engineering within Identity Services.

Skills

Identity engineering

Security architecture

Threat modelling

Zero Trust

Leadership

Tools

Entra ID for Agents

Microsoft Agent 365

OAuth 2.0

OpenID Connect

PowerShell

Python

Job description

CommBank is seeking a Staff Software Engineer to lead the secure adoption of agentic AI identity capabilities. You will define how agents are identified, authenticated and governed while remaining hands-on in prototyping and implementing secure solutions.

You'll drive architecture across AI agent identities, APIs and enterprise identity capabilities to protect credentials, access and data, shaping security boundaries and practical engineering patterns for enterprise services.