DevSecOps Cloud Security Engineer - Azure & AWS | Hybrid

IPH Limited; Sydney; Hybrid; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Hybrid working

Paid parental leave

Leave purchase scheme

Group Salary Continuance Insurance

Wellbeing Hub

Structured professional development

Fresh fruit daily

Collaborative culture

Job summary

IPH Limited is hiring a Cloud Security and DevSecOps Engineer to join our Sydney team on a full-time basis. You will design, implement and maintain security controls across Azure and AWS, embedding SAST, DAST and SCA into the SDLC and CI/CD pipelines.

Collaborate with infrastructure, cloud, architecture, development and security teams to ensure security by design and secure, resilient business outcomes. Hybrid working is standard.

Qualifications

• 5+ years in Cyber Security, Cloud Security or related fields.
• Hands-on with Microsoft Azure and AWS environments.
• Strong understanding of cloud security architecture and best practices.
• Experience operating SAST, DAST and SCA tools and integrating security testing within CI/CD pipelines.
• Knowledge of IAM, Zero Trust and Privileged Access Management concepts.
• Experience with scripting or automation (PowerShell, Python, Bash).

Responsibilities

• Design, implement and maintain cloud security controls across Azure and AWS environments.
• Monitor cloud security posture and remediation activities.
• Develop and maintain cloud security standards and architecture patterns.
• Conduct cloud security reviews and risk assessments for new projects and services.
• Embed security testing into CI/CD pipelines and manage SCA, SAST and DAST tools.
• Promote DevSecOps culture and Secure by Design principles.

Skills

Azure

AWS

Cloud Security

CI/CD security

SAST/DAST/SCA

IAM/Zero Trust

Scripting

Stakeholder comms

Job description

IPH Limited is hiring a Cloud Security and DevSecOps Engineer to join our Sydney team on a full-time basis. You will design, implement and maintain security controls across Azure and AWS, embedding SAST, DAST and SCA into the SDLC and CI/CD pipelines.

Collaborate with infrastructure, cloud, architecture, development and security teams to ensure security by design and secure, resilient business outcomes. Hybrid working is standard.