Staff Platform Engineer - Identity Access lifecycle

Staff Platform Engineer - Identity Lifecycle management (SailPoint)

• We're embarking on an engineering transformation with a key focus in building robust, secure, and highly scalable services to our customers.

• You have knowledge that spans both development and operations, including coding, infrastructure management, system admin/engineering, and DevOps Toolchains. 

• Together we will build tomorrow’s bank today, using world-leading engineering, technology, and innovation.

We're building tomorrow’s bank today, which means we need creative and diverse engineers to help us redefine what customers expect from a bank. Envisioning new technologies that are still waiting to be invented and reimagining products that support our customers and help build Australia’s future economy.

CommBank is recognised as leading the industry in IT and operations with its world-class platforms and processes, agile IT infrastructure, and innovation in everything from payments to internet banking and mobile apps. Our Software team are the brains behind Australia’s number one banking app, Netbank, Cardless Cash, Comm Sec Pocket and Spend Tracker. We go beyond a passion for web and mobile development, creating reliable APIs at a unique scale in Australia. And you could be a part of that journey.

See yourself in our team :

Cyber Security protects the bank and our customers from theft, losses and risk events, through effective and proactive management of cyber security, privacy and operational risk.

The Identity and Access Technology (IAT) team form a key pillar of the wider Group Security practice. As a Staff Software Engineer, Workforce Identity Lifecycle Management, you will provide technical expertise, strong stakeholder management and a clear delivery focus.

Do work that matters:

As a Staff Platform Engineer, you are a technical Subject Matter Expert (SME), consulting on technical strategies, products, and feature designs, and will be critical to our quality implementation and delivery. You will have the opportunity to work as a Full Cycle Engineer, including automation development, systems integration, and contributing to the evolution of our platforms and business strategy.

This role will see you lead key project initiatives that drive the organisation’s automation and optimisation capabilities, including the design and deployment of secure, scalable infrastructure and services in cloud environments such as AWS. Collaborating with this team will see you take ownership for a variety of platforms and services including Sailpoint, CyberArk and PingID.

You will also be invited to attend our regular engineering guilds to broaden your expertise and participate in agile ceremonies, allowing you to contribute to and help define the way we operate.

We’re interested in hearing from people who: 

• Can assist with designing innovative solutions to solve complicated problems as part of a cross-functional squad.

• Have led major end-to-end enterprise solutions including discovery, strategy, design, product, development, and deploy.

• Imbue a true DevSecOps mindset and approach. You build it, you secure it, you test it, and you run it.

• can ensure our technical approach is sound, fit for purpose, and well architected.

• Can support deployments across our Cloud (i.e. AWS, Azure, GCP) environments through our continuous delivery pipelines. Promote a culture of continuous learning, experimentation, and innovation, while contributing to governance, standards, and best practices.

​Tech skills:

We use a broad range of tools, languages, and frameworks. We don’t expect you to possess knowledge of all, but experience or exposure with some, or their equivalents, will set you up for success in this team; 

• Experience in full cycle platform engineering including design, build, challenge and run.

• Hands-on experience in designing, implementing, and maintaining CI/CD and automation tools e.g Github, GitHub Actions, TeamCity.

• Previous experience in Scripting/programming languages e.g PowerShell, Bash and Python.

• Windows/Linux Server experience.

• Develop, deploy and manage platform services via Infrastructure as Code (Terraform, AWS CDK and CloudFormation, Ansible, Lambda.

• Experience with containerisation, virtualisation, and orchestration technologies - Docker, Kubernetes, ECS, AKS etc.

• Observability - Grafana, Prometheus.

• Experience with SailPoint IIQ and broader IAM products (Cyber Ark, Ping) mandatory.