Lead AI Security Engineer

Skillfield

. Build and harden secure access paths for AI agents, including MCP gateways, AI gateways, guardrails and policy enforcement points .

Posted 11/4/2026contractMelbourne • AustraliaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in identity and access management engineering, with a strong focus on implementing Microsoft Entra ID, OAuth 2.0, and secrets management. Proven ability to automate security controls using IaC and CI/CD pipelines while mentoring engineering teams and collaborating with clients.

Highest-signal resume keywords

Identity And Access Management (IAM) EngineeringMicrosoft Entra ID ImplementationOAuth 2.0 And OpenID Connect (OIDC)Infrastructure As Code (IaC) ToolsSecrets Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

OAuth 2.0OpenID Connect (OIDC)Security Assertion Markup Language (SAML)System For Cross-domain Identity Management (SCIM)PythonGoTypeScriptTerraformBicepMicrosoft Azure

Soft Skills

MentoringCollaborationCoaching

Tools & Technologies

Microsoft Entra IDPrivileged Identity Management (PIM)Azure Key VaultAzure API ManagementAzure AI Foundry

Industry Keywords

Identity And Access ManagementPrivileged Access Management (PAM)AI-Specific ThreatsOWASP Top 10MCP Security

Tech Stack

Tools & technologies

AzurePythonTerraformTypeScriptVaultGo

About the role

Key responsibilities & impact

Build and harden secure access paths for AI agents, including MCP gateways, AI gateways, guardrails and policy enforcement points
Implement identity for agents and workloads using OAuth 2.0 token exchange, delegated authorisation, workload identity federation and short-lived credentials
Deliver PAM uplift for human and non-human identities on Microsoft Entra ID using PIM, workload identities and Azure Key Vault
Implement secrets management and just-in-time access
Secure APIs and MCP servers end to end, including authentication, authorisation, rate limiting, input validation and monitoring
Automate security controls with IaC and CI/CD pipelines for repeatable deployment across clients
Instrument AI agents, gateways and MCP servers with logging and monitoring to detect and investigate misuse
Coach and support a small engineering team, reviewing work and setting quality standards
Turn proofs of concept into production-ready, reusable patterns for Skillfield’s offerings
Collaborate directly with client teams to understand their environments and identify delivery risks early
Write code, configure platforms and ship working solutions

Requirements

What you’ll need

Substantial hands-on experience in identity and access management (IAM) engineering
Real implementation experience with Microsoft Entra ID, including Conditional Access, Privileged Identity Management (PIM), workload identities and Entra Agent ID
Deep working knowledge of OAuth 2.0, OpenID Connect (OIDC), Security Assertion Markup Language (SAML) and System for Cross-domain Identity Management (SCIM)
Hands-on experience implementing PAM and secrets management, including for service accounts and machine identities
Strong scripting or programming skills in Python, Go or TypeScript
Experience with infrastructure as code (IaC) tools such as Terraform or Bicep
Experience mentoring or guiding engineers, formally or as a technical lead on delivery
Hands-on experience with Microsoft Azure infrastructure, including networking, Azure Key Vault, managed identities and Azure API Management
Hands-on experience building or securing LLM and agent-based systems on Azure AI Foundry, including Azure OpenAI, and agent frameworks such as LangGraph or Semantic Kernel
Familiarity with AI-specific threats and controls, including the OWASP Top 10 for LLM Applications, prompt injection defences and MCP security
Consulting or client-facing delivery experience is highly regarded

Benefits

Comp & perks

Flexibility
Strong support
Performance-based recognition
Inclusive workplace
Recruitment process adjustments available