Staff Software Engineer - Business Lending Platform

About the role

CommBank is looking for a Staff Software Engineer in its Business Lending Platform Crew, based in the Sydney CBD area. The role leads the technical direction of secure, resilient lending platforms and services, with autonomy to influence architecture, standards and delivery. It involves shaping the future of banking through cloud-native technology, modern engineering and responsible AI, and driving continuous improvement and risk buy-down for the Commercial Lending user experience.

Key responsibilities

• Own the end-to-end technical direction and evolution of complex systems, balancing scalability, reliability, security, cost and maintainability.
• Design and build secure, resilient APIs, microservices, backend components and data-access layers at scale.
• Lead technical feasibility, solution design, engineering quality, dependency management, operational readiness and delivery.
• Establish cloud delivery, CI/CD strategies, engineering standards and controls for safe, repeatable delivery.
• Define automated testing strategies across unit, integration, contract, performance, resilience and security testing.
• Use observability, service-level objectives and operational data to improve system performance and reliability.
• Embed security and risk management throughout architecture, development and operations.
• Mentor engineers, run design reviews and create reusable engineering practices across squads.

Required profile

• An experienced, hands-on engineering leader comfortable moving between code, architecture and technical strategy.
• Sound judgement in complex environments and ability to align engineers, leaders and stakeholders on technical decisions.
• Experience in banking, commercial lending or another regulated environment is advantageous.

Required skills

• Backend engineering in C# or a comparable language, with distributed systems foundations.
• Cloud-native development on AWS, including resilience, security, scalability and cost optimisation.
• Event-driven and microservices architectures (Kafka, Kinesis, Amazon SNS, SQS or EventBridge).
• RESTful API design, domain modelling, relational and NoSQL data platforms.
• CI/CD with GitHub Actions, Buildkite or Octopus, supported by automated testing.
• Observability and SRE practices (Prometheus, Grafana, Splunk or CloudWatch).
• DevSecOps, threat modelling and secure-by-design controls.
• Responsible use of AI coding assistants and agentic engineering workflows.