Apply for the Senior Engineer - MS Active Directory position at Commonwealth Bank .
Your Impact & Contribution
From Entra-backed directory services to federation and policy-driven access, you'll engineer the core identity platforms that enable every CommBank colleague to sign in, get work done, and stay secure. You'll drive improvements across identity lifecycle automation, authentication and privileged access management, partner with EUX and Security on resilient designs, and deliver measurable gains in reliability and security posture. If you enjoy solving hard problems at enterprise scale and leaving systems safer and simpler than you found them, you'll thrive here.
Your Role
We're seeking a seasoned Active Directory Engineer with experience operating in a large and complex enterprise environment. As a Senior Engineer, you will provide operational support for our Active Directory and Entra ID platforms while contributing to the design, engineering and delivery of our strategic uplift initiatives. Our team is undertaking a significant modernisation program, and your technical leadership will be central to shaping the next generation of our identity infrastructure.
* Design, implement and maintain Active Directory and Entra ID environments, including domain controller management, replication, DNS/DHCP integration, OU structure, delegation models and platform hardening.
* Develop and maintain secure authentication configurations across Windows and cloud environments, covering Kerberos, NTLM, certificate-based authentication and modern Microsoft authentication patterns.
* Engineer and optimise Group Policy and configuration management to ensure secure, scalable and maintainable deployments across the enterprise fleet.
* Automate directory operations using PowerShell, Infrastructure as Code (IaC) and Configuration as Code practices across Windows Server and Azure environments.
* Drive AD/Entra ID health, performance and security posture, applying Zero Trust, privileged access tiering, MFA enforcement and identity segmentation principles.
* Integrate directory services with CI/CD and automation pipelines (GitHub Actions, TeamCity or similar) to deliver safe, repeatable and automated deployments.
* Troubleshoot complex identity, authentication and directory issues across hybrid cloud, on-premises and legacy systems.
* Collaborate with cross-functional teams on platform integrations, privileged access controls, directory-enabled applications and lifecycle processes.
Your Technical Skills & Experience
* Strong expertise in Active Directory, including domain controllers, replication, trusts, DNS, GPO design, delegation, hardening and authentication protocols (Kerberos, NTLM, cert-based auth).
* Solid knowledge of Entra ID, hybrid identity, Entra Connect / Cloud Sync, Conditional Access fundamentals, modern authentication and device join models.
* Proficient PowerShell scripting for automation, tooling, issue identification and operational uplift.
* Experience leading and delivering engineering initiatives across design, installation, configuration and productionisation of AD and Entra ID components.
* Hands‑on experience with Infrastructure as Code and modern deployment mechanisms across Windows Server and Azure ecosystems.
* Familiarity with CI/CD, GitHub, GitHub Actions, TeamCity or similar toolchains.
* Understanding of modern identity security principles including Zero Trust, privileged access tiering, MFA adoption and identity posture hardening.
Your New Team
* Positive team culture: Work alongside passionate professionals who value knowledge‑sharing and celebrate success together.
* Learning environment: Grow through hands‑on projects, formal training and exposure to modern identity and security practices.
* World‑class tooling: Leverage modern platforms and automation frameworks to deliver secure, scalable solutions.
* Impact that matters: Help enable colleagues to work safely anywhere, anytime and on any device, so they can deliver world‑class experiences for our customers.
Grow your career | Belong to a supportive team | Shape what's next
If you're already part of the Commonwealth Bank Group, you'll need to apply through Sidekick to submit a valid application. We're keen to support you with the next step in your career.
We are aware of some accessibility issues on this site, particularly for screen reader users. If you require additional support please contact HR Direct on .
Advertising End Date: 07/01/2026
Seniority Level: Mid‑Senior level
• Employment Type: Full‑time
• Job Function: Engineering and Information Technology
#J-18808-Ljbffr