Principal Software Engineer (.NET/Python, AI)

Commonwealth Bank; City of Melbourne; On-site; AUD 140,000 - 190,000; Full time

Job summary

Commonwealth Bank in Melbourne is seeking a senior software engineer to lead the Risk AI Platform, focusing on .NET/Python microservices, secure APIs, and scalable AWS deployments. You will drive architectural direction, codify engineering standards, and deliver multi-agent AI capabilities within risk management workflows.

You will collaborate with Product Owners, Data Scientists, and platform teams to extend the platform, implement AI-driven capabilities, reduce toil, and ensure privacy and

Qualifications

• Deep software engineering expertise in .NET and Python, with production microservices and API experience.
• Experience with AI/agentic engineering and LLM integration is highly valued.
• Strong frontend capability with React/Next.js and Node.js for production interfaces.
• Advanced AWS experience (EKS, S3, DynamoDB, CloudFormation) and multi-AZ design.
• Hands-on CI/CD and GitOps (GitHub Actions, ArgoCD) with automated testing strategies.
• Observability and reliability focus: Grafana, Prometheus, CloudWatch, and alerting tools.
• Security-first mindset: IAM, SSO/OIDC, RBAC, and secrets management in regulated environments.
• Data consumption from event streams (Kafka) and data formats (S3/Iceberg) for platform features.
• Ability to lead without authority: mentoring and setting engineering standards.

Responsibilities

• Own engineering for Risk AI Platform services: design, build, and operate .NET/Python microservices and REST APIs with OpenAPI specs and Kong gateway integration.
• Scale platforms from MVP to enterprise-grade: refactor architecture, modularisation, performance tuning, and reliability improvements.
• Provide hands-on technical leadership: write production code, conduct code reviews, define standards, and guide senior engineers.
• Establish golden paths for CI/CD (GitHub Actions + ArgoCD) and automated testing across unit, integration, and performance.
• Embed observability and operability with Grafana, Prometheus, and production readiness reviews.
• Drive AI capabilities: multi-agent architectures, agent workflows, and Rules-as-Code frameworks.
• Apply knowledge of LLM APIs/platforms, agent frameworks, and planning/optimisation patterns for architecture.
• Collaborate with Product Owners and Data Scientists to plan increments and deliver measurable risk-operations outcomes.
• Ensure compliance with Tech Controls, secure coding, secrets management, and encryption.

Skills

DOTNET

Python

AWS

API design

CI/CD

Microservices

React/Next.js

Kubernetes

Security

Observability

Tools

Kong API gateway

ArgoCD

Grafana

Prometheus

SailPoint

LangGraph

Job description

• You are a problem solver with a strong background in software engineering.
• We are a growing team within the bank and constantly involved in industry-changing solutions.
• Together we will build tomorrow's bank today, using world-leading engineering, technology, and innovation.

• You are a problem solver with a strong background in software engineering.
• We are a growing team within the bank and constantly involved in industry-changing solutions.
• Together we will build tomorrow's bank today, using world-leading engineering, technology, and innovation.

Do work that matters

Join the Operational Risk & Compliance Crew to lead engineering for our core AI-enabled risk platforms. Your primary focus is hands‑on, modern, reliable software engineering across .NET and Python on AWS, building secure APIs and microservices, uplifting CI/CD, and improving resilience and observability.

You will drive the technical direction as we scale these platforms from MVP to enterprise‑grade capability, embedding agentic AI into risk management processes that operate across the bank. Gen AI is a core enabler of the solutions you'll build. Data is a supporting concern, primarily consuming producer‑led data products and event streams.

See yourself in our team

Risk Management is modernising how the bank identifies, assesses, and manages risk — building an enterprise‑grade Risk AI Platform powered by an AWS‑first approach, ArgoCD‑managed deployments, and strong API standards. The platform underpins a growing portfolio of AI‑enabled products that automate risk processes, embed agentic intelligence, and deliver scalable, human‑in‑the‑loop workflows across Operational Risk & Compliance.

You will collaborate with Product Owners, Data Scientists, Risk Technology, and adjacent crews to extend the platform, deliver new AI‑driven capabilities, reduce toil, and meet tech‑control and privacy obligations. You'll be the technical lead within your squad — designing solutions, writing code, and providing engineering oversight to the team around you.

Key Responsibilities

• Own engineering for Risk AI Platform services: design, build, and operate .NET/Python microservices and REST APIs with OpenAPI specs and Kong gateway integration.
• Scale platforms from MVP to enterprise‑grade: drive architectural refactors, modularisation, performance tuning, and reliability improvements as we transition from lean delivery to sustainable, scalable systems.
• Provide hands‑on technical leadership: write production code, conduct peer reviews, define engineering standards, and guide Staff and Senior engineers in solution design and delivery.
• Establish golden paths for CI/CD (GitHub Actions + ArgoCD), automated testing (unit, integration, performance), and progressive delivery.
• Embed observability and operability (Grafana, Prometheus, PagerDuty) with SLOs/SLIs and production readiness reviews.
• Drive the integration of agentic AI capabilities: build and extend multi‑agent architectures, conversational AI workflows, and Rules-as-Code frameworks that power intelligent risk assessments.
• Apply knowledge of LLM APIs/platforms, agent frameworks (MCP, A2A), and planning/optimisation patterns to strengthen solution architecture and interoperability across the Risk AI ecosystem.
• Partner with Product Owners, Data Scientists, and platform teams to plan increments, de‑risk changes, and deliver measurable outcomes for risk operations.
• Ensure compliance with Tech Controls and Privacy Front Door processes; champion secure coding, secrets management (SSO/RBAC, SailPoint), and encryption.
• Consume producer‑led data products (S3/Iceberg, Kafka) as inputs to platform features; avoid tight coupling to data storage layers.

We're Interested In Hearing From People Who

• Are curious, life‑long learners who stay across emerging AI and engineering practices.
• Can influence the future of the company's technology estate every day.
• Can create a culture focused on accelerating the adoption of new and emerging technologies.
• Thrive in ambiguity — you've scaled something from early‑stage to enterprise before and know how to bring structure without slowing down.
• Are passionate about using AI to solve real‑world problems in risk management and governance.

Technical Skills:

• Deep software engineering expertise in .NET and/or Python, with a track record of building and operating production microservices and APIs at scale. Experience with FastAPI and REST/OpenAPI contract design is highly valued.
• AI and agentic engineering experience particularly with agent orchestration frameworks (e.g. LangGraph), LLM gateway/proxy patterns (e.g. LiteLLM), prompt engineering, and AI evaluation/observability tooling (e.g. Langfuse, HoneyHive). You don't need to be a data scientist, but you understand how to engineer reliable, observable AI systems.
• Modern frontend capability: experience with React, Next.js, and Node.js to build responsive, production‑grade user interfaces and backend‑for‑frontend layers.
• Strong AWS cloud experience: Hands‑on with EKS (Kubernetes), DynamoDB, S3, CloudFormation, ALB, and EC2. You're comfortable designing for high availability across multiple availability zones.
• Hands‑on CI/CD and GitOps experience: GitHub Actions, ArgoCD, containerisation (Docker, Helm/Kustomize), and automated testing strategies across unit, integration, and performance layers.
• Observability and operational excellence: Experience building dashboards and alerting with Grafana, Prometheus, CloudWatch, and ELK/Obstack, backed by SLOs/SLIs and production readiness reviews. Familiarity with PagerDuty for incident management.
• A security‑first mindset: familiarity with enterprise identity and access management (PingSSO/OIDC, SailPoint for RBAC), AWS Secrets Manager, and secure coding practices within a regulated environment.
• Data consumption literacy: Experience working with event streams (Kafka), cloud‑native data formats (S3/Iceberg), and NoSQL stores (DynamoDB) as a consumer of producer‑led data products.
• Strong architectural thinking: you can modularise a codebase, design API contracts, define integration patterns, and make pragmatic trade‑offs between speed and sustainability.
• Proven ability to lead without authority: you elevate the engineers around you through code reviews, technical mentoring, and setting the standard for engineering excellence.

Working with us:

At CommBank, we're committed to creating an accessible, inclusive and respectful workplace. If you require support or adjustments, please let us know. We welcome applications from people of all backgrounds, and we're particularly committed to making a positive difference for Aboriginal and/or Torres Strait Islander Peoples. For support, please contact 1800 989 696.