Cloud Security Engineer - Kubernetes & IaC Expert

Y-Axis; Western Australia; Hybrid; AUD 140,000 - 190,000; Full time

Job summary

Y-Axis is seeking a senior security-focused engineer to lead platform security across cloud and on-prem environments. You will define and own security standards for a Managed Kubernetes Service, applying best practices, image signing, scanning, and policy enforcement.

You will embed security into IaC pipelines, evaluate AI/ML-powered tooling, and collaborate with engineering teams to strengthen the platform's security foundations.

Qualifications

• 5+ years of experience across Platform Security, DevSecOps or SRE.
• Hands-on expertise securing Kubernetes environments.
• Experience with Kubernetes supply chain security tools.
• Experience implementing IaC security and automated scanning.
• Understanding of secrets management and identity security.
• Familiar with security standards and secure engineering principles.
• Competent scripting or programming ability.

Responsibilities

• Lead platform security initiatives across cloud and on-prem environments, including risk assessment and infrastructure hardening.
• Own and define security standards for a Managed Kubernetes Service supporting HPC workloads.
• Apply Kubernetes security best practices and build strong supply chain security (image signing, vulnerability scanning, policy enforcement).
• Embed security into IaC pipelines and evaluate AI/ML-powered security tooling.
• Partner with engineering and technology teams to raise security posture.

Skills

Platform Security

DevSecOps

SRE

Kubernetes security

Cosign

Trivy

Kyverno

IaC security

Checkov

Snyk

Secrets management

Identity security

Linux fundamentals

Networking basics

Scripting

Programming

Tools

Cosign

Trivy

Kyverno

Checkov

Snyk

Job description

Y-Axis is seeking a senior security-focused engineer to lead platform security across cloud and on-prem environments. You will define and own security standards for a Managed Kubernetes Service, applying best practices, image signing, scanning, and policy enforcement.

You will embed security into IaC pipelines, evaluate AI/ML-powered tooling, and collaborate with engineering teams to strengthen the platform's security foundations.