See yourself in the team

The Network Security Engineering team is responsible for delivering network security requirements and implementation to achieve business outcomes.

The GTS Networks team is responsible delivering, supporting and continuously improving the Bank’s Global Network and Security services.

Our Global Technology Services (GTS) products and services are leveraged across all Business Unit Platforms within the Bank to deliver industry-leading software including: CommBank App, Netbank, CommSee, CommSec, CommBiz and Commbank.com.au

Do work that matters

The purpose of this role is to provide sound input and engineering design to drive excellence, quality and performance for an IT service, across one or multiple portfolios.

To be successful in this role, some of the broad roles and responsibilities may include:

• Provide technical consulting and advice to projects to ensure alignment to Cyber Security, Network Architecture, and operational stability of CBA’s network assets.

• Identify and mitigate issues or risks associated with the network security design or solution proposals

• Support transitioning target architecture from current to desired state

• Produce high quality, sustainable solutions to meet business requirements, leveraging approved delivery frameworks.

• Manage escalation of complex technical issues from suppliers, operations and application teams

• Author and maintain detailed network security design documents, ensuring accuracy and representation of firewall configuration and deployment of security policy.

• Contribute to the documenting of current infrastructure services.

Application, Integration and Infrastructure

• Work with project teams to understand network connectivity between VMware, Windows, and Linux end-points.

• Integrating to public cloud infrastructure such as AWS and Azure, and hybrid cloud network integration.

We’re interested in hearing from people who possess the following:

• Strong hands-on experiences within IT Network

• Experience in F5 GTM, LTM and DNS VMWare NSX, and Azure/AWS network security group enforcement policies and firewall management.

• Discovery and validation of network connectivity requirements using enterprise tools such as Algosec, vRealise Network Insight, Splunk, Azure VSTS, and AWS VPC flow logs, R53, Cloud redirect and Cloudfront, SolarWinds, Qualys, and Infoblox.

• Demonstrated understanding and design of core switching and routing technologies such as VXLAN, VPN BGP, and OSPF.

• Knowledge and demonstrated experience of Cisco Switches (Nexus and IOS), Routers and Firewalls.

• Flexibility in working hours to accommodate after hour changes

• CCNP or CCSP

Desirable:

• Specialised knowledge of development and design methodologies             

• Network scripting and automation tools such as Ansible, Python, NSO, Yang, Terraform, JSON Script

• Experience Git Repo/Git Actions

• Experience within the Financial Service industry

Working with us

We support our people with the flexibility to balance where work is done with at least half their time each month connecting in office. We also have many other flexible working options available including changing start and finish times, part-time arrangements and job share to name a few. Talk to us about how these arrangements might work in the role you’re interested in.