Organisation:

At CommBank, technology underpins how we protect and serve millions of customers and how our people securely access the systems they need.

Our engineering teams build and operate technology at significant scale, with security, resilience and engineering quality designed in from the outset. CommBank India is an important part of our global engineering capability, working as one engineering community across India and Australia.

We are building a new generation of identity capabilities that move beyond traditional identity administration and point-in-time access decisions. The Identity Graph & Signals team is creating the technology foundation to understand identities, their relationships, their access and their behaviour across a complex technology estate.

Job Title: Staff Software Engineer – Identity Graph & Signals

Location: Bangalore

Business & Team: Technology | Cyber / IAE Crew
 

Impact & Contribution:

As a Staff Software Engineer – Identity Graph & Signals, you will be one of the senior individual contributors responsible for the technical direction and engineering quality of a strategic identity platform.

The platform will build a connected representation of identities across people, privileged identities, service accounts, workloads, applications, devices, credentials, entitlements and resources. It will combine that graph with near-real-time identity and security signals to enable stronger identity intelligence, risk detection and dynamic security decisions.

You will work on problems spanning distributed systems, graph modelling, event-driven architectures, identity security and large-scale data processing.

This is a hands-on Staff engineering role. You will design systems, write production software, make consequential architecture decisions and raise engineering capability across the team. You will influence engineers and teams beyond your immediate delivery scope without relying on organisational authority.

Key responsibilities

You will:

• Provide technical leadership for the architecture, design and evolution of the Identity Graph & Signals platform.

• Design and build highly available, secure and scalable distributed services that ingest, normalise, correlate and serve identity relationships and security signals.

• Define graph models capable of representing complex relationships between human identities, non-human identities, applications, workloads, accounts, credentials, entitlements, devices and resources.

• Engineer high-volume ingestion and event-processing pipelines for identity, authentication, authorisation, entitlement, device, workload and security telemetry.

• Develop APIs and services that allow identity relationships and signals to be consumed by authentication, authorisation, access governance, privileged access, detection and response, and other security capabilities.

• Solve difficult problems involving entity resolution, identity correlation, temporal relationships, graph traversal, event ordering, data quality, consistency, scale and low-latency access.

• Establish clear architectural boundaries, domain models, APIs, engineering patterns and technical standards that allow the platform to evolve safely.

• Make pragmatic engineering trade-offs across performance, reliability, security, maintainability, cost and speed of delivery.

• Remain deeply hands-on with production code, prototypes, design reviews and complex engineering problems.

• Lead technical design and code reviews, particularly for changes that affect platform architecture, security boundaries, reliability or long-term maintainability.

• Build security into the platform by design, including strong workload identity, authentication and authorisation, least privilege, encryption, secrets management and auditable access patterns.

• Design for operability from the beginning, using observability, SLOs, automated testing, deployment automation and production telemetry to continuously improve reliability.

• Work closely with identity architects, security engineers, product teams, data engineers and application teams across India and Australia.

• Identify architectural risks and systemic engineering issues early and drive them through to resolution.

• Mentor senior engineers and strengthen engineering capability through technical leadership, design thinking and high engineering standards.

• Contribute reusable patterns and engineering practices to the broader CommBank engineering community.

Essential Skills

We are looking for an engineer with substantial experience designing and building complex production systems.

You will bring:

• Typically 12+ years of software engineering experience, or equivalent depth of experience building and operating complex production systems.

• Demonstrated Staff-level technical leadership across systems or initiatives spanning multiple engineers, teams or domains.

• Exceptional software engineering capability in at least one modern backend language such as Java, Kotlin, Go, C#, Python or equivalent, with the ability to work effectively across a broader technology stack.

• Strong experience designing distributed, highly available and horizontally scalable systems.

• Deep understanding of API design, asynchronous processing, event-driven architectures, concurrency, failure handling and distributed-system trade-offs.

• Experience building platforms that process large volumes of data or events with demanding requirements for reliability, latency and correctness.

• Strong data-modelling capability across one or more of relational, document, key-value, search or graph data stores.

• Experience with cloud-native engineering on AWS, Azure or comparable cloud platforms.

• Strong engineering practices across automated testing, CI/CD, infrastructure automation, observability, production support and secure software development.

• A record of simplifying complex technical problems and turning ambiguous requirements into coherent architectures and working software.

• The ability to influence architecture and engineering decisions across teams while remaining collaborative and open to challenge.

• Strong written and verbal communication skills, including the ability to explain complex technical decisions and trade-offs clearly.

Highly Desirable

Direct experience in every area below is not required. Strong engineers with adjacent experience are encouraged to apply.

Experience in one or more of the following would be highly regarded:

• Graph databases and graph processing, including Amazon Neptune, Neo4j, JanusGraph or equivalent technologies.

• Graph modelling, graph traversal languages such as Gremlin or openCypher, entity resolution or relationship analytics.

• Large-scale streaming and event platforms such as Kafka, Kinesis, Event Hubs or equivalent.

• Identity and Access Management architectures involving OAuth 2.0, OpenID Connect, SAML, SCIM, authentication, authorisation, identity governance or privileged access management.

• Modern workload and non-human identity patterns, including service identities, workload identities, certificates, secrets and machine credentials.

• Identity-security or cybersecurity telemetry, detection engineering, risk signals or continuous access evaluation.

• Technologies and patterns such as SPIFFE/SPIRE, Microsoft Entra, CyberArk, SailPoint, Ping Identity, HashiCorp Vault or equivalent platforms.

• Large-scale security, fraud, observability, recommendation, knowledge-graph or other systems where relationships and real-time signals are central to decision-making.

What Success Looks Like

Within this role, success means more than delivering individual features.

You will have helped create a platform where:

• identity relationships can be understood across previously disconnected systems;

• identity and security signals can be processed and acted upon quickly;

• downstream teams can consume reliable identity intelligence through well-designed platform interfaces;

• architectural decisions enable rather than constrain future use cases;

• reliability, security and operability are intrinsic to the design;

• engineers around you make better technical decisions because of your influence; and

• the platform becomes a reusable strategic capability rather than another isolated identity system.

The Engineering Opportunity

Identity is changing.

The traditional model of managing users, accounts and entitlements in separate systems is increasingly insufficient for cloud, APIs, workloads, AI agents and other non-human identities. Security decisions increasingly depend on understanding the relationships between identities, resources, privileges and behaviour, and on being able to respond to signals as circumstances change.

The Identity Graph & Signals team is building that foundation at CommBank scale.

For the right engineer, this is an opportunity to solve technically difficult problems, shape a new platform rather than inherit a finished one, and have material influence over how identity security evolves across one of Australia's largest technology environments.

Education Qualifications

Bachelor's degree in Engineering, Computer Science, Information Technology or a related discipline, or equivalent practical experience.