Principal Software Engineer

Job Title: Principal Software Engineer Location: Bangalore Experience - 12 to 25 yrs Business & Team: The Technology Team is responsible for the world-leading application of technology and operations across every aspect of CommBank, from innovative product platforms for our customers to essential tools within our business. We also use technology to drive efficient and timely processing, an essential component of great customer service. CommBank is recognised as leading the industry in IT and operations with its world-class platforms and processes, agile IT infrastructure, and innovation in everything from payments to internet banking and mobile apps. The Group Security (GS) team protects the Bank and our customers from cyber compromise, through proactive management of cyber security, privacy, and operational risk. Our team includes: - Cyber Strategy & Performance - Cyber Security Centre - Cyber Protection & Design - Cyber Delivery - Cyber Data Engineering - Cyber Data Security - Identity & Access Technology - Fraud Management Impact & Contribution: As a Principal Software Engineer within Group Security, you will be responsible for implementing designs that align with the Group Security Architecture. You will develop solutions and guide design to drive outcomes across Core Product Systems within Group Security To ensure the Group achieves a sustainable competitive advantage. Your role will encompass various aspects such as Engineering, Automation, DevSecOps, and Engineering Quality and Productivity. You will utilize advanced technical expertise to achieve business outcomes and support the technical strategy of the team. You will be responsible for design analysis and the estimation process from Business Case, ideation, discovery, and inception phases. Roles & Responsibilities: - Architect robust solutions that are fully supportable in a production environment, ensuring alignment with security standards. Lead the design and architecture of scalable, maintainable, and secure full-stack applications. - Own and govern solution designs, ensuring they meet security and architectural standards. - Proactively seek opportunities for continuous improvement of security systems and data. - Work closely with Solution Architecture, functional SMEs, and other system representatives to deliver integrated end-to-end solutions. - Collaborate with product managers, designers, and other stakeholders to translate business requirements into technical solutions. Drive cross-functional collaboration, working closely with product managers, designers, and back-end engineers to deliver features and improvements aligned with business objectives. - Ensure adherence to best practices in software design, including modularity, reusability, and maintainability. - Implement best practices for AWS security, cost management, and performance optimisation. - Stay updated with the latest AWS offerings and evaluate their potential impact on the infrastructure. - Lead the front-end platform development, implementing scalable, high-performance front-end solutions using React and Next.js. - Ensure performance and scalability by optimizing the front-end platform for scalability and performance. - Maintain security best practices, implementing robust protection against vulnerabilities and maintaining compliance with industry standards. Ensure compliance across cloud, network and endpoints - Build and maintain CI/CD pipelines using GitHub Actions for continuous integration and deployment. - Perform code reviews, ensuring adherence to best practices, platform standards, and security guidelines. - Collaborate on architecture, leading discussions, and decision-making with a team of passionate engineers. - Deliver impactful solutions, taking ownership of key technical decisions and working with other engineers to ensure the platform delivers value to CBA teams and customers. - Mentor and guide engineers, providing mentorship and guidance to junior and mid-level engineers in developing secure APIs and cloud solutions, fostering a culture of continuous learning and improvement. - Provide strategic direction for engineering initiatives, aligning them with organizational goals. - Demonstrate capabilities to work in a fast-paced, high-pressure environment while delivering high-quality results on time. - Conduct and drive multiple extensive Proof of Concepts (PoCs) simultaneously, focusing on research, automation, and framework development. - Bring in the latest and greatest cloud-based solutions, ensuring the organization stays at the forefront of technology. - Experience or exposure to Generative AI, Large Language Models (LLM), and Agentic AI is highly desirable. Essential Skills: - 14-18 years of experience in building REST APIs and well-versed with microservice architecture. - Proficiency in Java/J2EE and scripting languages such as TypeScript, JavaScript, and Python. - Experience in AWS services like Lambda, API Gateway, EKS Cluster, IAM Roles & Policy, Bean Stalk, Fargate, VPC, Subnets, Route tables, and Load balancers. - Experience with DevOps and CI/CD tools such as GitHub, GitHub Actions, SonarQube, TeamCity, Jenkins, Docker, Kubernetes, GitHub Copilot, and Grafana. - Proficiency in monitoring and logging tools such as Splunk, AppDynamics, and CloudWatch, Grafana, and Prometheus. - Strong understanding of application architecture and knowledge of software implementation best practices and object-oriented design principles. - Excellent debugging and troubleshooting skills on AWS technologies. - Experience in frontend technologies like React and Next.js, and backend technologies like .NET Core, C#, ASP.NET, and Spring Boot. - Knowledge of AI & Machine Learning and LLM is desired. - Strong technical leadership and mentoring capabilities. - Excellent debugging and troubleshooting skills, particularly with AWS technologies. - Extensive experience in leading and managing large-scale engineering teams and projects. - Proven track record of delivering high-impact solutions that drive business value. - Ability to influence and drive change across the organization through data-driven insights and strategies. Security, Infrastructure, Automation, DevSecOps, and GenAI Skills: - Security: Implement security best practices, ensuring robust protection against vulnerabilities and maintaining compliance with industry standards. Experience with AWS security services and encryption methodologies like SSL/TLS and data encryption at rest and in transit. - Infrastructure: Proficiency in AWS cloud services, including VPC, EC2, S3, Lambda, and CloudWatch. Experience with Infrastructure as Code (IaC) tools like Terraform and CloudFormation. - Automation: Strong skills in automating repetitive tasks using Python, shell scripting, and PowerShell. Experience with CI/CD pipelines and tools like GitHub Actions, TeamCity, and Jenkins. - DevSecOps: Experience in integrating security practices into the DevOps pipeline, ensuring secure code deployment and continuous monitoring. Familiarity with DevSecOps tools and practices. - GenAI: Knowledge and experience in Generative AI, Large Language Models (LLM), and AI/ML platforms. Ability to integrate AI solutions into existing workflows and systems and stay updated with the latest advancements in the field. - Hands on Experience : Securing Enterprise Systems, Threat Mitigation, Penetration Testing, Forensic Investigations, IAM, Information Security, Vulnerability management, DLP, Cloud Security, EDR, SIEM, Firewall, , IPS/IDS, CIS Controls, Malware Analysis, Network Security