Staff Platform Engineer: Active Directory & Identity

Commonwealth Bank; Sydney; On-site; AUD 170,000 - 210,000; Full time

Job summary

Commonwealth Bank is seeking a Staff Platform Engineer - Active Directory to own the technical direction of enterprise AD in a hybrid environment. You will design, build and improve secure identity services spanning on-premises and AWS, while guiding the evolution of the hybrid identity architecture.

You will balance engineering with mentoring, automation and uplift of secure engineering practices across the identity services community, collaborating with Cyber Security, Infrastructure and Cloud

Qualifications

• Extensive practical Active Directory experience across forest and domain design, GPO, DNS and replication.
• Experience operating hybrid Active Directory estates spanning on-premises and AWS.
• Strong identity security knowledge including least privilege and credential hygiene.
• Working knowledge of Microsoft Entra ID, hybrid identity and modern authentication.
• Proficient scripting and automation for identity operations and repeatable delivery.

Responsibilities

• Act as senior technical authority for Active Directory across on‑premises, AWS-hosted and AWS-managed environments.
• Design and engineer hybrid directory topologies, domain controller placement, DNS, sites and services.
• Strengthen identity security and reduce identity-based attack paths via privileged access controls.
• Lead transitions toward target identity architectures and cloud migrations.
• Shape technical roadmaps for identity products and translate priorities into engineering plans.
• Champion automation and infrastructure-as-code for identity services.
• Mentor engineers and align identity designs across technical teams.
• Use metrics and new technologies to improve identity security, reliability and cost efficiency.

Skills

Active Directory

Hybrid identity

Entra ID

Terraform

AWS

Scripting

CI/CD

Security engineering

Mentoring

Tools

Terraform

AWS CDK

CloudFormation

Ansible

GitHub Actions

Grafana

Prometheus

Job description

Commonwealth Bank is seeking a Staff Platform Engineer - Active Directory to own the technical direction of enterprise AD in a hybrid environment. You will design, build and improve secure identity services spanning on-premises and AWS, while guiding the evolution of the hybrid identity architecture.

You will balance engineering with mentoring, automation and uplift of secure engineering practices across the identity services community, collaborating with Cyber Security, Infrastructure and Cloud