DevSecOps Engineer at Transport for NSW

Transport for NSW; Ryde; On-site; AUD 142,000 - 159,000; Full time

Job summary

Transport for NSW is seeking a DevSecOps Engineer to embed security across the SDLC for Enterprise Applications. You will automate controls, implement secure-by-design guardrails, and enable rapid delivery with reduced risk.

The role focuses on automated scanning, container security, CI/CD pipeline hardening, and reusable, compliant solutions for measurable risk reduction.

Qualifications

• In-depth experience securing software development lifecycles across cloud environments.
• Hands-on IaC, cloud security across AWS and Azure, and CI/CD hardening.
• Experience with IAM/RBAC, encryption, secrets management and baselines.
• Knowledge of network security including firewalls, WAF, and Zero Trust.
• Familiarity with security tools (Airlock, CrowdStrike, Qualys, Prisma).
• Proficient scripting in Python, Bash, and PowerShell in Agile/DevOps contexts.

Responsibilities

• Embed security throughout the SDLC for Enterprise Applications platforms.
• Automate security controls and guardrails to enable rapid, safe delivery.
• Implement automated code and infrastructure scanning in CI/CD pipelines.
• Ensure secure dev practices, container security, and audit-ready assurance.

Skills

AWS

Azure

Infrastructure as Code

CI/CD

Azure DevOps

IAM

RBAC

Network segmentation

Encryption

Secrets management

Security baselines

Firewalls

WAF

Zero Trust

Airlock

CrowdStrike

Qualys

Prisma

Python

Bash

PowerShell

Agile

DevOps

Platform delivery

Education

Bachelor's degree in a relevant field

Tools

Airlock

CrowdStrike

Qualys

Prisma

Job description

DevSecOps Engineer

Location: Macquarie Park, NSW, AU

Employment type: Fixed Term Full-Time

Salary range: $141678.0-$158677.0

Contract: Fixed Term Full Time until 30.06.2028.

About the role

In this role, you'll:

• You will play a key role in embedding security throughout the software development lifecycle across Enterprise Applications platforms.
• Working closely with development and platform teams, you will implement secure‑by‑design principles, automate security controls, and establish developer‑friendly guardrails that enable rapid delivery with reduced risk.
• The role focuses on secure development practices, including automated code and infrastructure scanning, container security, CI/CD pipeline security, and the implementation of reusable, compliant solutions that provide measurable risk reduction and audit‑ready assurance.

About you

• You will have experience in cloud and infrastructure security across AWS and Azure environments, with hands‑on expertise in Infrastructure as Code (IaC).
• You will possess strong knowledge of CI/CD platforms, such as Azure DevOps, including the integration of static and dynamic security scanning, pipeline hardening, and automated security controls.
• Your background will include implementing identity and access management (IAM), role‑based access controls, network segmentation, encryption, secrets management, and security baselines.
• You will also have a solid understanding of network security concepts, including firewalls, web application firewalls (WAF), and Zero Trust architectures.
• Experience with security tools such as Airlock, CrowdStrike, Qualys, and Prisma, including the management and remediation of identified vulnerabilities and risks, is highly valued.
• Additionally, you will have hands‑on scripting and automation experience using tools such as Python, Bash, and PowerShell, and a proven ability to work effectively within Agile, DevOps, or platform‑based delivery environments.

Who we are

Transport for NSW provides a safe, integrated, and efficient transport system. We connect people, communities and industry every day. Join us Our workforce is as diverse as the community we serve. If you’d like further information about our inclusion and diversity initiatives, visit Transport careers.

Flexible work options

Flexible work options may be available. Learn more via Flexible work options and policy.

Application details

Applications close 11:59 PM Thursday 17 September 2026.

For more information about this role, please contact [e-mail].

Aboriginal people and people living with disability are supported throughout the recruitment process and at work, and we encourage you to apply. Visit Supporting Aboriginal People or Supporting People with Disability for more information or speak to your talent team member to arrange any adjustments to how you interact with us.