DevSecOps Engineer

Transport for NSW; Sydney; On-site; AUD 142,000 - 159,000; Full time

Benefits offered by this job

Flexible work options may be available

Job summary

Transport for NSW is seeking an experienced security professional to embed security across the software development lifecycle for Enterprise Applications. You will work with development and platform teams to implement secure-by-design principles and automate security controls.

The role focuses on CI/CD pipeline security, automated scanning, and reusable compliant solutions that reduce risk and provide audit-ready assurance. This is a fixed-term full-time position until 30.06.2028.

Qualifications

• Experience in cloud and infrastructure security across AWS and Azure.
• Hands-on expertise in Infrastructure as Code (IaC).
• Strong knowledge of CI/CD platforms and security scanning.
• Experience implementing IAM, RBAC, encryption, secrets management.
• Understanding of network security, firewalls, WAF, Zero Trust.

Responsibilities

• Embed security throughout the software development lifecycle across Enterprise Applications platforms.
• Collaborate with development and platform teams to implement secure-by-design principles.
• Automate security controls and establish guardrails for rapid yet safe delivery.
• Secure CI/CD pipelines with automated scanning and risk reduction.

Skills

Cloud security (AWS/Azure)

IaC

CI/CD security

IAM & RBAC

Network security

WAF/Zero Trust

Vulnerability tools

Scripting (Python/Bash/PowerShell)

Agile/DevOps

Tools

Airlock

CrowdStrike

Qualys

Prisma

Job description

Organisation/Entity: Transport For NSW

Job category: Projects

Job location:

Macquarie Park, NSW, AU, 2113

Job reference number: 108265

Employment type: Fixed Term Full-Time

Salary range: $141678.0-$158677.0

You may have been part of some big projects before, but this work is legacy-building.

You bring structure, mitigation and education to our organisation. Our records and datasets are vast and varied. This is your opportunity to safeguard critical infrastructure, order and protect sensitive data, and defend against emerging cyber threats. You'll be part of an expert team who protect against thousands of threats every day.

In this role, you'll:

You will play a key role in embedding security throughout the software development lifecycle across Enterprise Applications platforms.

Working closely with development and platform teams, you will implement secure-by-design principles, automate security controls, and establish developer-friendly guardrails that enable rapid delivery with reduced risk.

The role focuses on secure development practices, including automated code and infrastructure scanning, container security, CI/CD pipeline security, and the implementation of reusable, compliant solutions that provide measurable risk reduction and audit-ready assurance. This is a Fixed Term Full Time role until 30.06.2028.

For more information on this position and business unit, view the role description and information pack.

About You

You will have experience in cloud and infrastructure security across AWS and Azure environments, with hands‑on expertise in Infrastructure as Code (IaC).

You will possess strong knowledge of CI/CD platforms, such as Azure DevOps, including the integration of static and dynamic security scanning, pipeline hardening, and automated security controls.

Your background will include implementing identity and access management (IAM), role‑based access controls, network segmentation, encryption, secrets management, and security baselines.

You will also have a solid understanding of network security concepts, including firewalls, web application firewalls (WAF), and Zero Trust architectures.

Experience with security tools such as Airlock, CrowdStrike, Qualys, and Prisma, including the management and remediation of identified vulnerabilities and risks, is highly valued.

Additionally, you will have hands‑on scripting and automation experience using tools such as Python, Bash, and PowerShell, and a proven ability to work effectively within Agile, DevOps, or platform‑based delivery environments.

Who We Are

Transport for NSW provides a safe, integrated, and efficient transport system. We connect people, communities and industry every day.

Join us

Our workforce is as diverse as the community we serve. If you’d like further information on our inclusion and diversity initiatives, visit Transport careers.

Flexible work options may be available.

Aboriginal people and people living with disability are supported throughout the recruitment process and at work, and we encourage you to apply.

Job Segment: ERP, Network Security, Cloud, Developer, Web Design, Security, Technology, Creative

Applications close 11:59 PM Thursday 17 September 2026