Organization: At CommBank, we never lose sight of the role we play in other people’s financial wellbeing. Our focus is to help people and businesses move forward to progress. To make the right financial decisions and achieve their dreams, targets, and aspirations. Regardless of where you work within our organisation, your initiative, talent, ideas, and energy all contribute to the impact that we can make with our work. Together we can achieve great things.

Job Title: Senior Software Engineer
Location: Bangalore-Manyata Tech Park

Business & Team: The CBA technology unit delivers the best digital banking services to Commonwealth Bank customers and to do so is responsible for digital delivery, group data and analytics, technology, and technology infrastructure, cyber, fraud, physical security and business resilience for all divisions across CBA. It is also dedicated to delivering the best workplace technology experience for our over 53,000 people across CBA and focused on providing the latest tools, technology, and resources to enhance the way we work together and empower our people to achieve more for our customers.

Impact &contribution: As a Senior Software Engineer in our Identity Engineering space, part of the broader Cyber Engineering function, you will report directly to the Engineering Chapter Lead and play a key role in enhancing the scalability, reliability, and security of our identity and automation platforms. You will contribute to the delivery of complex PAM and identity initiatives across the organisation's systems and infrastructure, supporting our mission to protect platforms, data, and digital assets across both cloud and on-premises environments.

Working in a DevSecOps environment, your focus will be on privileged access management, identity lifecycle automation, and embedded security practices. You'll collaborate with cross-functional teams to integrate identity and security controls into every stage of the engineering lifecycle, driving innovation, operational efficiency, and platform resilience.

Roles & responsibilities:

• Have deep experience with CyberArk's suite PAS (CPM, PVWA, PSM, EPV, PTA, PSMP) and privileged access management.
• Experienced in building custom connectors, plugins, and session management patterns for financial and cloud applications.
• Are skilled in onboarding workflows for privileged accounts, implementing and managing CyberArk GPOs and hardening policies.
• Works with stakeholders to establish and enforce privileged access policies, while streamlining processes for developing, testing, and adopting new technologies within the team.
• Are experienced in automating identity and PAM tasks using REST APIs, PACLI, and scripting (PowerShell, Python, etc.).
• Have experience with Sailpoint, PingID, or other identity platforms, including identity lifecycle management and integration.
• Are familiar with incident management, post incident reviews, and problem management in the context of identity and access management.
• Have a passion for designing, developing, deploying and running high-quality identity and security solutions.

Essential skills:

We use a broad range of tools, languages, and frameworks. We don't expect you to know them all but experience or exposure with some of these (or equivalents) will set you up for success in this team:

• Deep experience with CyberArk's suite PAS (CPM, PVWA, PSM, EPV, PTA, PSMP) and privileged access management.
• Proven expertise in integrating CyberArk with major cloud platforms such as AWS, Azure, and GCP. 
• Experience developing custom connectors, plugins, and patterns for CPM/PSM, including integration with financial industry applications (e.g. Mainframe).
• Skilled in onboarding workflows for privileged accounts, implementing and managing CyberArk GPOs and hardening policies.
• Ability to collaborate with stakeholders to define and enforce privileged access policies and controls.
• Experience automating identity and PAM tasks using REST APIs, PACLI, and scripting (PowerShell, Python, etc.).
• Hands-on experience with CyberArk SIA (Secure Infrastructure Access) is desirable.
• Experience with Sailpoint, PingID, or other identity platforms, including identity lifecycle management and integration.
• Familiarity with incident management, post incident reviews, and problem management in the context of identity and access management.
• Hands-on experience in designing, implementing, and maintaining CI/CD and automation tools (e.g. Github, GitHub Actions, TeamCity).
• Scripting/programming languages (e.g. PowerShell, Bash, Python).
• Windows/Linux Server experience, installation, configuration and administration.
• Exposure to logging/Monitoring tools for identity and PAM (e.g. Observability - Grafana, Prometheus).
• Experience with containerisation, virtualisation, and orchestration technologies (e.g. Docker, Kubernetes, ECS, AKS) is desirable.
• Experience with CloudFormation, Ansible, Lambda, or comparable automation/infrastructure tools is desirable. Responsibilities include developing, deploying, and managing platform services using Infrastructure as Code tools such as Terraform and AWS CDK.
• CyberArk Defender or Sentry certification preferred; CyberArk Certified Delivery Engineer is a plus.
• Any experience in adopting Gen AI on above tool set is a plus.

Education Qualification: Bachelor’s degree or master’s degree in engineering in Computer Science/Information Technology.

Advertising End Date: 29/10/2025