Senior Platform Engineer

Organization: - At CommBank, we never lose sight of the role we play in other peoples financial wellbeing. Our focus is to help people and businesses move forward to progress. To make the right financial decisions and achieve their dreams, targets, and aspirations. Regardless of where you work within our organisation, your initiative, talent, ideas, and energy all contribute to the impact that we can make with our work. Together we can achieve great things.

Job Title: - Senior Platform Engineer

Location: - Bangalore

Business & Team: -

Group Security Technologys purpose is safeguarding a brighter future for all through innovative technology. We do this by designing, building and running security products across cyber, identity and fraud technology in order to fulfil our objectives: Improve velocity of security outcomes with great customer experiences. Innovate, digitise and disrupt the way we deliver security. Lead the way in secure cloud and control adoption. Assure safe, sound, and secure technology.

Our Edge Security Technology squad builds, runs and enhances the edge security products and services that protect the CBA Group's internet facing websites, web applications, APIs and perimeter infrastructure from distributed denial of service, web application & API cyberattacks.

Impact & contribution: -.

The Senior Platform Engineer in Cyber will be reporting directly to an Engineering Chapter Lead working in our cyber engineering team to ensure the scalability, reliability and security of our platforms.

Your work will involve the delivery of complex security initiatives across the groups platforms and systems. Our mandate is to protect the business platforms, systems, data, digital assets, and reputation across our cloud and datacentre infrastructure.

We also support the group in developing innovative and market-leading offerings, which are underpinned by security, privacy, and trust.

Roles & Responsibilities: -

• Bring hands on experience working with Infrastructure as Code using tools such as Terraform, CloudFormation, CDK etc.
• In depth experience using scripting/programming languages such as PowerShell, Bash & Python, as well as good Windows/Linux Server experience.
• Strong knowledge of CI/CD and automation tools like Github, GitHub Actions, TeamCity, Terraform CI/CD pipeline
• Automation of observability logs and metrices, including dashboard, monitoring and alerting.
• Incident management, post incident reviews, problem management.
• Demonstratable experience in solving complex problems.
• Background in API security engineering with expertise in WAAP technologies, API gateway security, rate limiting, and authentication frameworks (OAuth 2.0, JWT).

Essential Skills :-

We use a broad range of tools, languages, and frameworks. We dont expect you to know them all but experience or exposure with some of these (or equivalents) will set you up for success in this team.

• 8+ Years of relevant IT experience
• IaC, Terraform
• AWS infrastructure
• Lambda, CloudFormation, CDK, AWS Code Build/Code Pipeline
• PowerShell, Bash, Python
• Familiarity with gateways like Kong, Apigee, AWS API gateway and their security configurations.
• Protocols & Standards : OAuth2.0, OIDC, JWT, mTLS, REST, GraphQL, JSON Schema, and OpenAPI/Swagger.
• Experience with anomaly detection or security analytics for API traffic, e.g. Akamai NoName, would be advantageous

Education Qualification:

• Bachelors degree/Masters degree in Engineering in Computer Science/Information Technology