Staff Software Engineer - Secure Desktop and Identity Services

About the role

CommBank is looking for an experienced Staff Software Engineer to join its Secure Desktop and Identity Services domain within the End User Experience (EUX) division, which enables safe, seamless access for every employee. As the most senior engineer in the squad, you will set the technical direction for the platform ecosystem and guide a team delivering reliable, secure and cost-effective end-user computing solutions, balancing hands-on engineering with high-level design and mentoring. The role sits in the Sydney CBD area and offers hybrid working flexibility.

Key responsibilities

• Shape the roadmap and strategy for the squad's products and services, and provide technical leadership and mentorship.
• Demonstrate exemplary code, design, testing and documentation, raising the standard of engineering craft.
• Design and implement platform services and support tools, leading the move from current to target architectures.
• Build CI/CD pipelines and automation tooling that make changes safe, repeatable and observable, supporting SLAs and incident management.
• Identify emerging technologies, including AI-enabled tooling, and improve the Standard Operating Environment and related tooling.
• Work with other squads to define engineering standards and patterns.

Required profile

• Exposure to several of the listed technologies (or equivalents).
• Leadership competencies: setting technical direction, coaching and mentoring engineers, managing multiple priorities across squads and geographies, and integrating risk, security and resilience into design and delivery.

Required skills

• Full lifecycle platform engineering across Windows and macOS environments.
• Backend development in .NET, Java or TypeScript, with scripting in PowerShell, Bash or Python.
• CI/CD and automation (GitHub, GitHub Actions) and DevSecOps practices.
• Microservices, RESTful APIs and domain-driven design.
• AWS, infrastructure as code (Terraform, CloudFormation, Ansible) and containerisation (Docker, Kubernetes).
• Identity and access management platforms such as Microsoft Active Directory and Entra ID, SailPoint IIQ, CyberArk or Ping.

Applicants from outside the Commonwealth Bank Group must apply through the bank's online application process; existing group members apply through Sidekick. The advertising ends on 06/11/2026.