Staff Platform Engineer - Active Directory - Identity Services
Commonwealth Bank of Australia5 days ago
Sydney, Australia +2 moreStaff+
Responsibilities
- Act as a senior technical authority for Active Directory across on-premises, AWS-hosted, and AWS-managed directory environments.
- Design and engineer hybrid directory topologies involving domain controllers, replication, sites and services, DNS, network connectivity, and trust patterns.
- Strengthen identity security through privileged access controls, tiered administration, hardening, credential protection, and identity attack-path reduction.
- Lead Active Directory modernisation, cloud migration, hybrid identity integration, target architecture transitions, and legacy authentication retirement.
- Shape identity product roadmaps and translate strategic priorities into executable engineering plans.
- Champion automation, infrastructure as code, secure engineering standards, and reusable identity-service patterns.
- Mentor engineers and align technical teams on identity designs and standards.
- Use metrics, feedback, and emerging technologies to improve identity security, reliability, supportability, and cost effectiveness.
Requirements
- Deep practical enterprise-scale Active Directory expertise, including forest and domain design, Group Policy, DNS, DFS, sites and services, replication, trusts, delegation, schema, and object lifecycle management.
- Experience operating hybrid Active Directory estates across on-premises infrastructure and AWS, including EC2-hosted domain controllers and AWS Directory Service / AWS Managed Microsoft AD.
- Strong identity security knowledge covering least privilege, tiered administration, credential hygiene, Kerberos and NTLM hardening, LDAP security, identity threat detection, and attack-path reduction.
- Working knowledge of Microsoft Entra ID, hybrid identity, directory synchronisation, Conditional Access, and modern authentication and authorisation.
- Strong scripting and automation capability for identity operations and repeatable engineering delivery.
- Experience with infrastructure-as-code and CI/CD technologies such as Terraform, AWS CDK, CloudFormation, Ansible, GitHub, or GitHub Actions.
- Exposure to AWS services supporting directory workloads and automation, plus observability technologies such as Grafana and Prometheus.
- Strong technical communication, influencing, mentoring, and ability to explain complex identity and security concepts clearly.
Benefits
- Accessible, inclusive, and respectful workplace with support and adjustments available.
- Applications are welcomed from people of all backgrounds, with particular commitment to Aboriginal and/or Torres Strait Islander Peoples.
- Advertising end date: 23/10/2026.
About Commonwealth Bank of Australia
Commonwealth Bank of Australia is an ASX-listed bank headquartered in Sydney that provides retail, business, and institutional banking, payments, and wealth services across Australia. Its offerings include transaction and savings accounts, home and business lending, cards, merchant services, digital banking, superannuation, and investment platforms such as CommSec. Founded in 1911, the bank serves millions of customers through branches, contact centres, and online channels.