Cloud Security Engineer - IaC, CI/CD & CNAPP (GCP/AWS)

Westpac; Sydney; On-site; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Flexible work arrangements

Learning and development opportunities

Volunteer initiatives

Job summary

Westpac is seeking a Senior Engineer to join the Security Controls Assessment team in Sydney. The role focuses on engineering, automating and validating security controls for Westpac's cloud platforms, with emphasis on GCP and AWS.

You will build IaC/PaC guardrails, roll out Wiz CNAPP, and embed controls into engineering pipelines in a regulated environment. You will develop automated controls, contribute to CI/CD security, and drive secure cloud practices across the organisation while working

Qualifications

• Strong cloud security engineering experience across GCP and AWS, with a focus on securing cloud workloads.
• Hands-on IaC and PaC capabilities, especially Terraform.
• Deep DevSecOps exposure, embedding security controls into CI/CD pipelines.

Responsibilities

• Design, build and maintain automated security controls across GCP and AWS, covering IAM, network security, encryption, monitoring and Kubernetes security.
• Develop Infrastructure as Code and Policy as Code using Terraform, OPA/Rego, Sentinel, GCP Organization Policies and AWS SCPs.
• Lead rollout of Wiz CNAPP, integrating security across identity, security operations, ticketing and engineering environments.
• Embed automated security scanning and policy controls into CI/CD pipelines (IaC, secrets, container scanning) using GitHub Enterprise, Harness.io and Wiz Code.
• Build continuous controls monitoring and automated evidence collection using Python, aligning with CIS, NIST CSF and APRA CPS 234.
• Collaborate with Cloud Platform and Engineering teams to promote Security by Design and remediate cloud risks.

Skills

Cloud security

GCP/AWS

Terraform IaC

CI/CD security

Python automation

Tools

Terraform

OPA/Rego

Sentinel

GitHub Enterprise

Harness.io

Wiz CNAPP

Job description

Westpac is seeking a Senior Engineer to join the Security Controls Assessment team in Sydney. The role focuses on engineering, automating and validating security controls for Westpac's cloud platforms, with emphasis on GCP and AWS.

You will build IaC/PaC guardrails, roll out Wiz CNAPP, and embed controls into engineering pipelines in a regulated environment. You will develop automated controls, contribute to CI/CD security, and drive secure cloud practices across the organisation while working