Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Staff Platform Engineer - Active Directory

Home > Other programming jobs

Staff Platform Engineer - Active Directory in Australia new

  • Commonwealth Bank of Australia
  • Full time
  • Email
  • Sydney

Responsibilities

  • Act as a senior technical authority for Active Directory across on-premises, AWS-hosted, and AWS-managed directory environments.
  • Design and engineer hybrid directory topologies involving domain controllers, replication, sites and services, DNS, network connectivity, and trust patterns.
  • Strengthen identity security through privileged access controls, tiered administration, hardening, credential protection, and identity attack-path reduction.
  • Lead Active Directory modernisation, cloud migration, hybrid identity integration, target architecture transitions, and legacy authentication retirement.
  • Shape identity product roadmaps and translate strategic priorities into executable engineering plans.
  • Champion automation, infrastructure as code, secure engineering standards, and reusable identity-service patterns.
  • Mentor engineers and align technical teams on identity designs and standards.
  • Use metrics, feedback, and emerging technologies to improve identity security, reliability, supportability, and cost effectiveness.

Requirements

  • Deep practical enterprise-scale Active Directory expertise, including forest and domain design, Group Policy, DNS, DFS, sites and services, replication, trusts, delegation, schema, and object lifecycle management.
  • Experience operating hybrid Active Directory estates across on-premises infrastructure and AWS, including EC2-hosted domain controllers and AWS Directory Service / AWS Managed Microsoft AD.
  • Strong identity security knowledge covering least privilege, tiered administration, credential hygiene, Kerberos and NTLM hardening, LDAP security, identity threat detection, and attack-path reduction.
  • Working knowledge of Microsoft Entra ID, hybrid identity, directory synchronisation, Conditional Access, and modern authentication and authorisation.
  • Strong scripting and automation capability for identity operations and repeatable engineering delivery.
  • Experience with infrastructure-as-code and CI/CD technologies such as Terraform, AWS CDK, CloudFormation, Ansible, GitHub, or GitHub Actions.
  • Exposure to AWS services supporting directory workloads and automation, plus observability technologies such as Grafana and Prometheus.
  • Strong technical communication, influencing, mentoring, and ability to explain complex identity and security concepts clearly.

Benefits

  • Accessible, inclusive, and respectful workplace with support and adjustments available.
  • Applications are welcomed from people of all backgrounds, with particular commitment to Aboriginal and/or Torres Strait Islander Peoples.
  • Advertising end date: 23/10/2026.

Commonwealth Bank of Australia

Commonwealth Bank of Australia is an ASX-listed bank headquartered in Sydney that provides retail, business, and institutional banking, payments, and wealth services across Australia. Its offerings include transaction and savings accounts, home and business lending, cards, merchant services, digi...

Similar positions

Staff Engineer, Brand

  • LTK
  • Full time
  • Remote
  • 10/16/2026
  • Salary: Competitive
  • United States

Enterprise Security Engineer, Vulnerability Manage

  • OpenAI
  • Full time
  • USA
  • 10/16/2026
  • Salary: $347k - $445k/yr
  • Remote

Senior Product Security Engineer

  • Plaid
  • Full time
  • USA
  • 10/16/2026
  • Salary: $190k - $263k/yr
  • Seattle, WA

Full-Stack Engineer - Creative Agents

  • ElevenLabs
  • Full time
  • Remote
  • 10/16/2026
  • Worldwide

Staff Corporate IT Engineer

  • Gympass
  • Full time
  • Remote
  • 10/16/2026
  • Brazil