Lead AI Security Engineer

SkillfieldMelbourneHybridContract2 days ago

Skillfield, a specialist technology consultancy in cyber, data and AI, is seeking a Lead AI Security Engineer in Melbourne (hybrid) to build security foundations for AI agents in production. The role involves leading a small team, hands-on engineering of identity and access management, PAM, API and MCP security, and requires substantial IAM experience with Microsoft Entra ID and strong scripting skills.

What you'll do

Build and harden secure access paths for AI agents, including MCP gateways, AI gateways, guardrails and policy enforcement points
Implement identity for agents and workloads: OAuth 2.0 token exchange, delegated authorisation, workload identity federation and short-lived credentials
Deliver PAM uplift for human and non-human identities on Microsoft Entra ID, using PIM, workload identities and Azure Key Vault, including secrets management and just-in-time access
Secure APIs and MCP servers end to end, from authentication and authorisation to rate limiting, input validation and monitoring
Automate security controls with infrastructure as code (IaC) and CI/CD pipelines so they're repeatable across clients
Instrument AI agents, gateways and MCP servers with logging and monitoring, so misuse can be detected and investigated
Coach and support a small team of engineers, reviewing their work and setting a high bar for quality
Turn proofs of concept into production-ready, reusable patterns that become part of Skillfield's offerings
Collaborate directly with client teams to understand their environment, and spot delivery risks early

What you need

Must-have

Microsoft Entra IDConditional AccessPrivileged Identity Management (PIM)Workload identitiesEntra Agent IDOAuth 2.0OpenID Connect (OIDC)SAML

Nice-to-have

Microsoft AzureAzure Key VaultManaged identitiesAzure API ManagementAzure AI FoundryAzure OpenAILangGraphSemantic Kernel

Soft skills

MentoringCoachingCollaborationClient-facing communicationRisk identification

AI SecurityIdentity and Access ManagementMicrosoft Entra IDPrivileged Access ManagementAPI SecurityMCPAzureConsultingLead EngineerMelbourne

/What you'll do

/What you need

Must-have

Nice-to-have

Soft skills

What you'll do

What you need