Organization: At CommBank, we never lose sight of the role we play in other people’s financial wellbeing. Our focus is to help people and businesses move forward to progress, make the right financial decisions, and achieve their dreams, targets, and aspirations. Regardless of where you work within our organisation, your initiative, talent, ideas, and energy all contribute to the impact that we can make with our work. Together we can achieve great things.
Job Title: Principal Software Engineer
Location: Bangalore
Business & Team: The Technology Team is responsible for the world-leading application of technology and operations across every aspect of CommBank, from innovative product platforms for our customers to essential tools within our business. We also use technology to drive efficient and timely processing, an essential component of great customer service. CommBank is recognised as leading the industry in IT and operations with its world-class platforms and processes, agile IT infrastructure, and innovation in everything from payments to internet banking and mobile apps.
The Group Security (GS) team protects the Bank and our customers from cyber compromise, through proactive management of cyber security, privacy, and operational risk. Our team includes:
Cyber Strategy & Performance
Cyber Security Centre
Cyber Protection & Design
Cyber Delivery
Cyber Data Engineering
Cyber Data Security
Identity & Access Technology
Fraud Management
Impact & Contribution:
As a Principal Software Engineer within Group Security, you will be responsible for implementing designs that align with the Group Security Architecture. You will develop solutions and guide design to drive outcomes across Core Product Systems within Group Security To ensure the Group achieves a sustainable competitive advantage. Your role will encompass various aspects such as Engineering, Automation, DevSecOps, and Engineering Quality and Productivity. You will utilize advanced technical expertise to achieve business outcomes and support the technical strategy of the team. You will be responsible for design analysis and the estimation process from Business Case, ideation, discovery, and inception phases.
Roles & Responsibilities
Lead the design and architecture of secure, scalable, and supportable API and platform solutions, ensuring alignment with enterprise security and architectural standards.
Drive technical strategy, engineering standards, cloud-native adoption, DevSecOps practices, and continuous improvement across security platforms and services.
Collaborate with engineering, architecture, product, and security stakeholders to deliver integrated end-to-end solutions, while providing technical leadership, mentoring, and guidance to engineers.
Lead evaluation of emerging technologies and conduct Proof of Concepts (PoCs), including AI/LLM capabilities where relevant, to accelerate innovation and improve engineering outcomes.
Technical Skills & Experience
14+ years of software engineering experience with strong expertise in designing and building enterprise-scale REST APIs and microservices.
Deep expertise in enterprise backend engineering (Java/Spring Boot or .NET Core/C#) and Python(must have) and modern API development patterns, with experience building secure, scalable cloud-native services.
Strong understanding of software architecture, distributed systems, secure coding practices, API security (OAuth2, OIDC, JWT), and object-oriented design principles.
Experience designing and implementing secure-by-design solutions in enterprise environments.
Strong experience in building and operating cloud-native services using infrastructure as a code such as terraform, Cloud formation templates etc.
Hands-on experience with AWS services such as API Gateway, Lambda, EKS/ECS, IAM, VPC, Security Groups, Load Balancers, and CloudWatch.
Experience building scalable, resilient, and secure platforms in cloud environments.
Experience implementing DevSecOps practices, CI/CD…