Staff Software Engineer (G&S)

Overview

Staff Software Engineer on the Identity Graph & Signals team within Group Security. The role provides technical leadership for a strategic identity platform that builds a connected graph of identities, resources and security signals, and is a hands-on, senior individual contributor role.

What you'll do

• Provide technical leadership for the architecture, design and evolution of the Identity Graph & Signals platform.
• Design and build highly available, secure and scalable distributed services that ingest, normalise, correlate and serve identity relationships and security signals.
• Define graph models representing relationships between human identities, non-human identities, applications, workloads, accounts, credentials, entitlements, devices and resources.
• Engineer high-volume ingestion and event-processing pipelines for identity, authentication, authorisation, entitlement, device, workload and security telemetry.
• Develop APIs and services that allow identity relationships and signals to be consumed by authentication, authorisation, access governance, privileged access, detection and response, and other security capabilities.
• Solve difficult problems involving entity resolution, identity correlation, temporal relationships, graph traversal, event ordering, data quality, consistency, scale and low-latency access.
• Establish clear architectural boundaries, domain models, APIs, engineering patterns and technical standards that allow the platform to evolve safely.
• Make pragmatic engineering trade-offs across performance, reliability, security, maintainability, cost and speed of delivery.
• Remain deeply hands-on with production code, prototypes, design reviews and complex engineering problems.
• Lead technical design and code reviews, particularly for changes affecting platform architecture, security boundaries, reliability or long-term maintainability.
• Build security into the platform by design, including strong workload identity, authentication and authorisation, least privilege, encryption, secrets management and auditable access patterns.
• Design for operability from the beginning, using observability, SLOs, automated testing, deployment automation and production telemetry.
• Work closely with identity architects, security engineers, product teams, data engineers and application teams across India and Australia.
• Identify architectural risks and systemic engineering issues early and drive them through to resolution.
• Mentor senior engineers and strengthen engineering capability through technical leadership, design thinking and high engineering standards.
• Contribute reusable patterns and engineering practices to the broader CommBank engineering community.

What you'll need

• Typically 12+ years of software engineering experience, or equivalent depth of experience building and operating complex production systems.
• Demonstrated Staff-level technical leadership across systems or initiatives spanning multiple engineers, teams or domains.
• Exceptional software engineering capability in at least one modern backend language such as Java, Kotlin, Go, C#, Python or equivalent, with the ability to work effectively across a broader technology stack.
• Strong experience designing distributed, highly available and horizontally scalable systems.
• Deep understanding of API design, asynchronous processing, event-driven architectures, concurrency, failure handling and distributed-system trade-offs.
• Experience building platforms that process large volumes of data or events with demanding requirements for reliability, latency and correctness.
• Strong data-modelling capability across one or more of relational, document, key-value, search or graph data stores.
• Experience with cloud-native engineering on AWS, Azure or comparable cloud platforms.
• Strong engineering practices across automated testing, CI/CD, infrastructure automation, observability, production support and secure software development.
• A record of simplifying complex technical problems and turning ambiguous requirements into coherent architectures and working software.
• The ability to influence architecture and engineering decisions across teams while remaining collaborative and open to challenge.
• Strong written and verbal communication skills, including the ability to explain complex technical decisions and trade-offs clearly.
• Bachelor's degree in Engineering, Computer Science, Information Technology or a related discipline, or equivalent practical experience.

Nice to have

• Graph databases and graph processing, including Amazon Neptune, Neo4j, JanusGraph or equivalent technologies.
• Graph modelling, graph traversal languages such as Gremlin or openCypher, entity resolution or relationship analytics.
• Large-scale streaming and event platforms such as Kafka, Kinesis, Event Hubs or equivalent.
• Identity and Access Management architectures involving OAuth 2.0, OpenID Connect, SAML, SCIM, authentication, authorisation, identity governance or privileged access management.
• Modern workload and non-human identity patterns, including service identities, workload identities, certificates, secrets and machine credentials.
• Identity-security or cybersecurity telemetry, detection engineering, risk signals or continuous access evaluation.
• Technologies and patterns such as SPIFFE/SPIRE, Microsoft Entra, CyberArk, SailPoint, Ping Identity, HashiCorp Vault or equivalent platforms.
• Large-scale security, fraud, observability, recommendation, knowledge-graph or other systems where relationships and real-time signals are central to decision-making.

Details

• Location: Bangalore, Manyata Tech Park Road.
• Collaboration across India and Australia.