Staff Software Engineer

You will:

Provide technical leadership for the architecture, design and evolution of the Identity Graph & Signals platform.

Design and build highly available, secure and scalable distributed services that ingest, normalise, correlate and serve identity relationships and security signals.

Define graph models capable of representing complex relationships between human identities, non-human identities, applications, workloads, accounts, credentials, entitlements, devices and resources.

Engineer high-volume ingestion and event-processing pipelines for identity, authentication, authorisation, entitlement, device, workload and security telemetry.

Develop APIs and services that allow identity relationships and signals to be consumed by authentication, authorisation, access governance, privileged access, detection and response, and other security capabilities.

Solve difficult problems involving entity resolution, identity correlation, temporal relationships, graph traversal, event ordering, data quality, consistency, scale and low-latency access.

Establish clear architectural boundaries, domain models, APIs, engineering patterns and technical standards that allow the platform to evolve safely.

Make pragmatic engineering trade-offs across performance, reliability, security, maintainability, cost and speed of delivery.

Remain deeply hands-on with production code, prototypes, design reviews and complex engineering problems.

Lead technical design and code reviews, particularly for changes that affect platform architecture, security boundaries, reliability or long-term maintainability.

Build security into the platform by design, including strong workload identity, authentication and authorisation, least privilege, encryption, secrets management and auditable access patterns.

Design for operability from the beginning, using observability, SLOs, automated testing, deployment automation and production telemetry to continuously improve reliability.

Work closely with identity architects, security engineers, product teams, data engineers and application teams across India and Australia.

Identify architectural risks and systemic engineering issues early and drive them through to resolution.

Mentor senior engineers and strengthen engineering capability through technical leadership, design thinking and high engineering standards.

Contribute reusable patterns and engineering practices to the broader CommBank engineering community.

We are looking for an engineer with substantial experience designing and building complex production systems.

You will bring:

Typically 12+ years of software engineering experience, or equivalent depth of experience building and operating complex production systems.

Demonstrated Staff-level technical leadership across systems or initiatives spanning multiple engineers, teams or domains.

Exceptional software engineering capability in at least one modern backend language such as Java, Kotlin, Go, C#, Python or equivalent, with the ability to work effectively across a broader technology stack.

Strong experience designing distributed, highly available and horizontally scalable systems.

Deep understanding of API design, asynchronous processing, event-driven architectures, concurrency, failure handling and distributed-system trade-offs.

building platforms that process large volumes of data or events with demanding requirements for reliability, latency and correctness.

Strong data-modelling capability across one or more of relational, document, key-value, search or graph data stores.

with cloud-native engineering on AWS, Azure or comparable cloud platforms.

Strong engineering practices across automated testing, CI/CD, infrastructure automation, observability, production support and secure software development.

A record of simplifying complex technical problems and turning ambiguous requirements into coherent architectures and working software.

The ability to influence architecture and engineering decisions across teams while remaining collaborative and open to challenge.

Strong written and verbal communication skills, including the ability to explain complex technical decisions and trade-offs clearly.

Direct experience in every area below is not required.

Strong engineers with adjacent experience are encouraged to apply.

in one or more of the following would be highly regarded:

Graph databases and graph processing, including Amazon Neptune, Neo4j, JanusGraph or equivalent technologies.

Graph modelling, graph traversal languages such as Gremlin or openCypher, entity resolution or relationship analytics.

Large-scale streaming and event platforms such as Kafka, Kinesis, Event Hubs or equivalent.

Identity and Access Management architectures involving OAuth 2.0, OpenID Connect, SAML, SCIM, authentication, authorisation, identity governance or privileged access management.

Modern workload and non-human identity patterns, including service identities, workload identities, certificates, secrets and machine credentials.

Identity-security or cybersecurity telemetry, detection engineering, risk signals or continuous access evaluation.

Technologies and patterns such as SPIFFE/SPIRE, Microsoft Entra, CyberArk, SailPoint, Ping Identity, HashiCorp Vault or equivalent platforms.

Large-scale security, fraud, observability, recommendation, knowledge-graph or other systems where relationships and real-time signals are central to decision-making.

Within this role, success means more than delivering individual features.

You will have helped create a platform where:

identity relationships can be understood across previously disconnected systems;

identity and security signals can be processed and acted upon quickly;

downstream teams can consume reliable identity intelligence through well-designed platform interfaces;

architectural decisions enable rather than constrain future use cases;

reliability, security and operability are intrinsic to the design;

engineers around you make better technical decisions because of your influence; and

the platform becomes a reusable strategic capability rather than another isolated identity system.

Identity is changing.

The traditional model of managing users, accounts and entitlements in separate systems is increasingly insufficient for cloud, APIs, workloads, AI agents and other non-human identities.

Security decisions increasingly depend on understanding the relationships between identities, resources, privileges and behaviour, and on being able to respond to signals as circumstances change.

The Identity Graph & Signals team is building that foundation at CommBank scale.

For the right engineer, this is an opportunity to solve technically difficult problems, shape a new platform rather than inherit a finished one, and have material influence over how identity security evolves across one of Australia's largest technology environments.

Bachelor's degree in Engineering, Computer Science, Information Technology or a related discipline, or equivalent practical experience.

If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application.

We’re keen to support you with the next step in your career.

We're aware of some accessibility issues on this site, particularly for screen reader users.

We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.