Staff Platform Engineer – Active Directory, Identity Services

Commonwealth Bank

. Act as a senior technical authority for Active Directory across on-premises, AWS-hosted and AWS-managed directory environments .

Posted 10/15/2026full-timeSydney • AustraliaLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Active Directory management, hybrid identity integration, and identity security practices. Proficient in designing and implementing secure, scalable identity architectures while mentoring technical teams and driving automation initiatives.

Highest-signal resume keywords

Active Directory ManagementIdentity Security KnowledgeHybrid Identity IntegrationInfrastructure-As-CodeScripting and Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Active DirectoryGroup PolicyDNSReplicationKerberosNTLM HardeningLDAP SecurityMicrosoft Entra IDIdentity Threat DetectionCredential Hygiene

Soft Skills

Technical CommunicationMentoringInfluencing

Tools & Technologies

AWS Directory ServiceTerraformAWS CDKCloudFormationAnsibleGitHubGrafanaPrometheus

Industry Keywords

Hybrid Directory TopologiesPrivileged Access ControlsIdentity-Based Attack PathsCloud MigrationAutomation

Tech Stack

Tools & technologies

AnsibleAWSCloudCyber SecurityDNSEC2GrafanaPrometheusTerraform

About the role

Key responsibilities & impact

Act as a senior technical authority for Active Directory across on-premises, AWS-hosted and AWS-managed directory environments
Contribute expertise across Microsoft Entra ID
Design and engineer hybrid directory topologies, including domain controller placement, replication, sites and services, DNS, network connectivity and trust patterns
Strengthen identity security through privileged access controls, tiered administration, hardening standards, credential protection and reduction of identity-based attack paths
Lead the transition towards target identity architectures, including Active Directory modernisation, cloud migration, hybrid identity integration and retirement of legacy authentication
Shape the technical roadmap for identity products and translate strategic priorities into executable engineering plans
Champion automation, infrastructure as code, secure engineering standards and reusable patterns across identity services
Mentor engineers and build alignment on identity designs and standards across technical teams
Use metrics, feedback and emerging technologies to improve identity security, reliability, supportability and cost effectiveness
Collaborate with engineers and partners across Cyber Security, Infrastructure, Cloud and product teams

Requirements

What you’ll need

Extensive practical Active Directory experience across forest and domain design, Group Policy, DNS, DFS, sites and services, replication, trusts, delegation, schema and object lifecycle management
Experience operating hybrid Active Directory estates spanning on-premises infrastructure and AWS, including EC2-hosted domain controllers and AWS Directory Service / AWS Managed Microsoft AD
Strong identity security knowledge covering least privilege, tiered administration, credential hygiene, Kerberos and NTLM hardening, LDAP security, identity threat detection and attack-path reduction
Working knowledge of Microsoft Entra ID, including hybrid identity, directory synchronisation, Conditional Access and modern authentication and authorisation
Strong scripting and automation capability applied to identity operations and repeatable engineering delivery
Experience with infrastructure-as-code and CI/CD technologies such as Terraform, AWS CDK, CloudFormation, Ansible, GitHub or GitHub Actions
Exposure to AWS services supporting directory workloads and automation, alongside observability technologies such as Grafana and Prometheus
Strong technical communication and influencing skills, with the ability to mentor engineers and explain complex identity and security concepts clearly

Benefits

Comp & perks

Accessible, inclusive and respectful workplace
Workplace support or adjustments for accessibility needs
Career development support for Commonwealth Bank Group employees
Support from HR Direct and accessibility assistance