Organization: At CommBank, we never lose sight of the role we play in other people’s financial wellbeing. Our focus is to help people and businesses move forward to progress, make the right financial decisions, and achieve their dreams, targets, and aspirations. Regardless of where you work within our organisation, your initiative, talent, ideas, and energy all contribute to the impact that we can make with our work. Together we can achieve great things.

Job Title: Principal Software Engineer

Location: Bangalore

Business & Team: The Technology Team is responsible for the world-leading application of technology and operations across every aspect of CommBank, from innovative product platforms for our customers to essential tools within our business. We also use technology to drive efficient and timely processing, an essential component of great customer service. CommBank is recognised as leading the industry in IT and operations with its world-class platforms and processes, agile IT infrastructure, and innovation in everything from payments to internet banking and mobile apps.

The Group Security (GS) team protects the Bank and our customers from cyber compromise, through proactive management of cyber security, privacy, and operational risk. Our team includes:

• Cyber Strategy & Performance
• Cyber Security Centre
• Cyber Protection & Design
• Cyber Delivery
• Cyber Data Engineering
• Cyber Data Security
• Identity & Access Technology
• Fraud Management

Impact & Contribution:

As a Principal Software Engineer within Group Security, you will be responsible for implementing designs that align with the Group Security Architecture. You will develop solutions and guide design to drive outcomes across Core Product Systems within Group Security To ensure the Group achieves a sustainable competitive advantage. Your role will encompass various aspects such as Engineering, Automation, DevSecOps, and Engineering Quality and Productivity. You will utilize advanced technical expertise to achieve business outcomes and support the technical strategy of the team. You will be responsible for design analysis and the estimation process from Business Case, ideation, discovery, and inception phases.

Roles & Responsibilities

• Lead the design and architecture of secure, scalable, and supportable API and platform solutions, ensuring alignment with enterprise security and architectural standards.
• Drive technical strategy, engineering standards, cloud-native adoption, DevSecOps practices, and continuous improvement across security platforms and services.
• Collaborate with engineering, architecture, product, and security stakeholders to deliver integrated end-to-end solutions, while providing technical leadership, mentoring, and guidance to engineers.
• Lead evaluation of emerging technologies and conduct Proof of Concepts (PoCs), including AI/LLM capabilities where relevant, to accelerate innovation and improve engineering outcomes.

Technical Skills & Experience

• 14+ years of software engineering experience with strong expertise in designing and building enterprise-scale REST APIs and microservices.
• Deep expertise in enterprise backend engineering (Java/Spring Boot or .NET Core/C#) and Python(must have) and modern API development patterns, with experience building secure, scalable cloud-native services.
• Strong understanding of software architecture, distributed systems, secure coding practices, API security (OAuth2, OIDC, JWT), and object-oriented design principles.
• Experience designing and implementing secure-by-design solutions in enterprise environments.
• Strong experience in building and operating cloud-native services using infrastructure as a code such as terraform, Cloud formation templates etc.
• Hands-on experience with AWS services such as API Gateway, Lambda, EKS/ECS, IAM, VPC, Security Groups, Load Balancers, and CloudWatch.
• Experience building scalable, resilient, and secure platforms in cloud environments.
• Experience implementing DevSecOps practices, CI/CD pipelines, security automation, observability, and troubleshooting across cloud-native platforms.
• Ability to drive architecture decisions, engineering standards, and platform strategy across teams.
• Proven track record of delivering high-impact engineering outcomes and influencing stakeholders across the organisation.
• Experience working in security, risk, compliance, fraud, identity, or other enterprise platform domains is desirable (Nice to Have).
• Exposure to AI/LLM-enabled engineering solutions and security automation (Nice to Have).

Soft Skills

• Strong communication and presentation skills, with the ability to influence stakeholders and drive alignment across teams.
• Strong analytical and reasoning skills, combined with the ability to challenge the status quo and drive innovative thinking.

Education Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Technology, Engineering, or a related discipline.
• AWS certification such as AWS Certified Solutions Architect or AWS Certified Developer is desirable.

• Security-related certifications are desirable.