
Senior Principal Engineer - Agentic AI
Primary stack
Nice to have's
Job description
About the Position
Senior Principal Engineer - Agentic AI
Product Engineering - Spain (Remote)
About Ditto
At Ditto, we're redefining digital trust. Our unified identity platform helps banks, financial institutions, governments, and other regulated organizations verify identities, prevent fraud, and deliver secure digital experiences through identity verification, authentication, passwordless access, and mobile threat defense.
We're a global team with a startup mindset, led by CEO Gonzalo Alonso, on a mission to make digital trust simple, secure, and accessible.
The Role
AI agents are beginning to act on behalf of people and businesses-making decisions, transacting, and connecting to other systems on their own. The identity tools most organizations rely on today were built for people or predictable machine identities, not autonomous agents.
Ditto is investing in an agentic identity platform to address this. We're hiring a Senior Principal Engineer to help design and build it-hands-on-drawing on Ditto's heritage in identity, device binding, runtime protection, and continuous authentication, and using large language models as a genuine force-multiplier for the research and the delivery.
In one line: own the design and hands-on build of the platform's hardest capabilities-verifiable agent identity, instance integrity, and continuous runtime trust-on a modern, standards-based foundation, moving at real pace.
Responsibilities
- Help set the technical direction and architecture for the platform, and make sound build/buy calls under uncertainty.
- Integrate with existing enterprise identity providers and open standards rather than reinventing them, keeping external systems behind adapters so implementations can evolve as standards mature.
- Grow and mentor the team that scales the platform-a genuine principal-level remit.
- Engage the broader standards and security community to keep the work current, credible, and interoperable.
Requirements
-
Must-have:
- 10+ years building production distributed systems, platform, or security infrastructure, with principal-level technical ownership-architecting and shipping, not only advising.
- Deep identity & authorization expertise: OAuth 2.1 / OIDC, token exchange and on-behalf-of flows, sender-constrained tokens, PKI, FIDO2 / WebAuthn, mTLS, and workload identity.
- Applied cryptography in practice: credential formats, binding proofs, key lifecycle and rotation, and clear reasoning about what a construction does and does not prove.
- Hands-on depth in at least one differentiating area: hardware attestation / TEEs, RASP, or continuous / risk-based authentication and shared signals.
- Demonstrated fluency leveraging LLMs for rigorous technical research and for building, with the judgement to verify output against primary sources.
- Fluent English, spoken and written; based in Europe (EU / EEA) and able to work across European time zones with a mostly-overlapping team.
-
Bonus Points:
- Fluent or native Spanish, spoken and written-valuable across our Spanish-speaking European and LATAM customers and partners.
- Experience with agent ecosystems and protocols (MCP, agent-to-agent) and the identity work around them.
- Decentralised identity (DID / VC) and eIDAS 2.0 / EUDI wallet models.
- EU regulatory fluency-EU AI Act, DORA, GDPR-and experience building audit and traceability in from day one.
- Participation in standards bodies (e.g. IETF, OWASP) or relevant open-source contribution.
We Offer
A rare mandate to help define and build a category-shaping platform on an open, still-forming standards landscape-with principal-level ownership of architecture and technical direction, and a path to build and lead the team. You'll build on foundations Ditto has shipped for years in identity, device binding, runtime protection, and continuous authentication, rather than starting from scratch.
We value ownership, curiosity, and collaboration, giving our people the freedom to make decisions, challenge ideas, and grow their careers while helping build the future of digital trust.
About the Company
At Ditto, we're redefining digital trust. Our unified identity platform helps banks, financial institutions, governments, and other regulated organizations verify identities, prevent fraud, and deliver secure digital experiences through identity verification, authentication, passwordless access, and mobile threat defense.
We're a global team with a startup mindset, led by CEO Gonzalo Alonso, on a mission to make digital trust simple, secure, and accessible.
Link to This Job
Location
Spain (Remote)
Department
Product Engineering
Employment Type
Employee Full-Time
© Ditto Trade. This job description was sourced from the employer's public career page. TheJob is not the employer — we index the posting and route candidates to the source. All content rights and hiring decisions belong to the employer.
Ditto Trade is an Australian fintech startup financially backed and supported by a reputable company in the wealth management and brokerage industry.Led by a team of innovators and subject matter experts with skin in the game, Ditto aims to deploy exciting, cutting edge regulated financial products to a global audience with a focus on finance, data and behavioural science with a strong social community angle.
More at Ditto Trade
All 23 roles
Forward Deployed Engineer - Platform
Ditto Trade · United States

Senior Enterprise Account Executive
Ditto Trade · United States

Senior Demand Generation Manager
Ditto Trade · Barcelona

Product Manager, Maintain Ops
Ditto Trade · United States