AWS DevSecOps Engineer for Secure AI Platform

Sestra People; City of Melbourne; On-site; AUD 140,000 - 190,000; Full time

Job summary

Sestra People is seeking an AWS DevSecOps Engineer to join a consulting team building a new enterprise AI platform for a major Australian organisation. The role focuses on embedding security, governance, and automated controls into the platform from day one.

You will build and automate cloud security controls with Terraform, integrate security into CI/CD workflows, and work with IAM, SCPs, and Policy as Code while collaborating with platform, SRE/DevSecOps, and engineering teams.

Qualifications

• Strong AWS security experience in a consulting environment.
• DevSecOps or cloud security background with hands-on engineering experience.
• Proficient in Terraform or IaC to build secure platforms.
• CI/CD pipelines experience including secure deployments.
• Deep knowledge of IAM and cloud access controls.
• Familiarity with Policy as Code and SCPs.
• Security automation experience across cloud environments.

Responsibilities

• Build and automate security controls for the AWS-based AI platform.
• Embed security into CI/CD and self-service deployment workflows.
• Translate security requirements into technical controls and reusable automations.
• Collaborate with platform, SRE/observability, and DevSecOps engineers.
• Advise the squad on security considerations as capabilities are built.

Skills

AWS security

DevSecOps

Terraform

CI/CD

IAM & access controls

Policy as Code

Security automation

SCPs

GitHub Actions

Azure DevOps

Scripting

Client-facing consulting

Tools

Terraform

GitHub Actions

Azure DevOps

Job description

Sestra People is seeking an AWS DevSecOps Engineer to join a consulting team building a new enterprise AI platform for a major Australian organisation. The role focuses on embedding security, governance, and automated controls into the platform from day one.

You will build and automate cloud security controls with Terraform, integrate security into CI/CD workflows, and work with IAM, SCPs, and Policy as Code while collaborating with platform, SRE/DevSecOps, and engineering teams.