Staff Software Engineer (G&S)
Organization -
Impact and Contributions
Staff Software Engineer – Identity Graph & Signals
Key Responsibilities
You will:
- Provide technical leadership for the architecture, design and evolution of the Identity Graph & Signals platform.
- Design and build highly available, secure and scalable distributed services that ingest, normalise, correlate and serve identity relationships and security signals.
- Define graph models capable of representing complex relationships between human identities, non-human identities, applications, workloads, accounts, credentials, entitlements, devices and resources.
- Engineer high-volume ingestion and event-processing pipelines for identity, authentication, authorisation, entitlement, device, workload and security telemetry.
- Develop APIs and services that allow identity relationships and signals to be consumed by authentication, authorisation, access governance, privileged access, detection and response, and other security capabilities.
- Solve difficult problems involving entity resolution, identity correlation, temporal relationships, graph traversal, event ordering, data quality, consistency, scale and low-latency access.
- Establish clear architectural boundaries, domain models, APIs, engineering patterns and technical standards that allow the platform to evolve safely.
- Make pragmatic engineering trade-offs across performance, reliability, security, maintainability, cost and speed of delivery.
- Remain deeply hands-on with production code, prototypes, design reviews and complex engineering problems.
- Lead technical design and code reviews, particularly for changes that affect platform architecture, security boundaries, reliability or long-term maintainability.
- Build security into the platform by design, including strong workload identity, authentication and authorisation, least privilege, encryption, secrets management and auditable access patterns.
- Design for operability from the beginning, using observability, SLOs, automated testing, deployment automation and production telemetry to continuously improve reliability.
- Work closely with identity architects, security engineers, product teams, data engineers and application teams across India and Australia.
- Identify architectural risks and systemic engineering issues early and drive them through to resolution.
- Mentor senior engineers and strengthen engineering capability through technical leadership, design thinking and high engineering standards.
- Contribute reusable patterns and engineering practices to the broader CommBank engineering community.
Requirement-
Typically 12+ years of software engineering experience
, or equivalent depth of experience building and operating complex production systems.
- Demonstrated Staff-level technical leadership across systems or initiatives spanning multiple engineers, teams or domains.
- Exceptional software engineering capability in at least one modern backend language such as
Java, Kotlin, Go, C#, Python or equivalent
, with the ability to work effectively across a broader technology stack.
- Strong experience designing
distributed, highly available and horizontally scalable systems
.
- Deep understanding of API design, asynchronous processing, event-driven architectures, concurrency, failure handling and distributed-system trade-offs.
- Experience building platforms that process large volumes of data or events with demanding requirements for reliability, latency and correctness.
- Strong data-modelling capability across one or more of relational, document, key-value, search or graph data stores.
- Experience with cloud-native engineering on
AWS, Azure or comparable cloud platforms
.
- Strong engineering practices across automated testing, CI/CD, infrastructure automation, observability, production support and secure software development.
- A record of simplifying complex technical problems and turning ambiguous requirements into coherent architectures and working software.
- The ability to influence architecture and engineering decisions across teams while remaining collaborative and open to challenge.
- Strong written and verbal communication skills, including the ability to explain complex technical decisions and trade-offs clearly.
Highly Desirable
not required
Graph databases and graph processing
, including Amazon Neptune, Neo4j, JanusGraph or equivalent technologies.
- Graph modelling, graph traversal languages such as
Gremlin or openCypher
, entity resolution or relationship analytics.
- Large-scale streaming and event platforms such as
Kafka, Kinesis, Event Hubs or equivalent
.
- Identity and Access Management architectures involving OAuth 2.0, OpenID Connect, SAML, SCIM, authentication, authorisation, identity governance or privileged access management .
- Modern workload and non-human identity patterns, including service identities, workload identities, certificates, secrets and machine credentials.
- Identity-security or cybersecurity telemetry, detection engineering, risk signals or continuous access evaluation.
- Technologies and patterns such as
SPIFFE/SPIRE, Microsoft Entra, CyberArk, SailPoint, Ping Identity, HashiCorp Vault
or equivalent platforms.
- Large-scale security, fraud, observability, recommendation, knowledge-graph or other systems where relationships and real-time signals are central to decision-making.
What Success Looks Like
Within this role, success means more than delivering individual features. You will have helped create a platform where:
- identity relationships can be understood across previously disconnected systems;
- identity and security signals can be processed and acted upon quickly;
- downstream teams can consume reliable identity intelligence through well-designed platform interfaces;
- architectural decisions enable rather than constrain future use cases;
- reliability, security and operability are intrinsic to the design;
- engineers around you make better technical decisions because of your influence; and
- the platform becomes a reusable strategic capability rather than another isolated identity system.
The Engineering Opportunity
Education Qualifications
Not included in the source posting: about the role, benefits.
Skills
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.