Staff Software Engineer - Agentic AI Security
Commonwealth Bank of Australia5 days ago
Sydney, Australia +2 moreStaff+
Responsibilities
- Lead engineering adoption of Microsoft Entra ID for Agents and Microsoft Agent 365, including agent registration, ownership, permissions, inventory, visibility, and lifecycle controls.
- Establish secure patterns for agent identity, authentication, authorization, secrets, tool access, and privileged operations.
- Design controls addressing prompt injection, excessive agency, unsafe tool use, credential exposure, privilege escalation, and data leakage.
- Apply Zero Trust, least privilege, identity isolation, scoped permissions, short-lived credentials, and human approval to agent architectures.
- Build and prototype secure agentic AI capabilities for Identity Services engineering and operational workflows.
- Ensure agent activity is observable, attributable, auditable, and appropriately governed.
- Provide hands-on technical leadership, mentor engineers, simplify or retire obsolete architecture, and shape the technical roadmap for agentic AI, automation, and identity engineering.
Requirements
- Strong identity engineering expertise combined with practical knowledge of AI agents and their security risks.
- Hands-on expertise with Microsoft Entra ID for Agents, Microsoft Agent 365, or comparable agent identity and governance platforms.
- Strong knowledge of Microsoft Entra ID, OAuth 2.0, OpenID Connect, application identities, service principals, managed identities, and workload identities.
- Experience designing enterprise identity lifecycle and governance patterns for non-human identities.
- Applied understanding of agentic AI threats, threat modeling, trust boundaries, sandboxing, tool allow-listing, permission scoping, and secure handling of untrusted content.
- Understanding of secure delegation, token exchange, and emerging agent identity approaches such as AI Identity Management System.
- Familiarity with Microsoft 365 Copilot, Copilot Studio agents, Microsoft Graph permissions, connectors, or MCP-style tool integrations.
- Practical PowerShell, Python, or similar coding skills, with confidence working across APIs, SDKs, and configuration-as-code.
- Ability to influence engineering direction, mentor others, and own complex strategic initiatives.
Benefits
- The employer offers an accessible, inclusive, and respectful workplace and support or adjustments for applicants who require them.
- Applications are welcomed from people of all backgrounds, with a stated commitment to Aboriginal and/or Torres Strait Islander Peoples.
- Advertising end date is 23/10/2026.
About Commonwealth Bank of Australia
Commonwealth Bank of Australia is an ASX-listed bank headquartered in Sydney that provides retail, business, and institutional banking, payments, and wealth services across Australia. Its offerings include transaction and savings accounts, home and business lending, cards, merchant services, digital banking, superannuation, and investment platforms such as CommSec. Founded in 1911, the bank serves millions of customers through branches, contact centres, and online channels.