DevSecOps Engineer - Cloud Security & CI/CD Expert

the original; Sydney; On-site; AUD 142,000 - 159,000; Full time

Job summary

Transport for NSW is looking for a DevSecOps Engineer to embed security across the software development lifecycle for Enterprise Applications platforms, based at Macquarie Park, NSW. The role focuses on secure development practices and hands-on cloud security across AWS/Azure environments.

You will collaborate with development and platform teams to implement secure-by-design principles, automate security controls, and strengthen CI/CD security with measurable risk reduction and audit-ready

Qualifications

• Experience securing cloud and infrastructure across AWS and Azure.
• Hands-on IaC expertise and secure-by-design practices.
• Proficiency with CI/CD security, including automated scans.
• IAM, RBAC, network segmentation, encryption, secrets management.
• Knowledge of WAF, Zero Trust, and security baselines.
• Scripting/automation with Python, Bash, PowerShell.

Responsibilities

• Embed security across the software development lifecycle.
• Collaborate with development and platform teams to automate controls.
• Implement reusable, compliant solutions with audit-ready assurance.

Skills

Cloud security across AWS & Azure

Infrastructure as Code (IaC)

Azure DevOps CI/CD

IAM & RBAC

Network segmentation

Encryption & secrets management

WAF & Zero Trust

Security tools: Airlock

Security tools: CrowdStrike

Security tools: Qualys

Security tools: Prisma

Scripting: Python

Scripting: Bash

Scripting: PowerShell

Agile/DevOps mindset

Tools

Azure DevOps

Airlock

CrowdStrike

Qualys

Prisma

Job description

Transport for NSW is looking for a DevSecOps Engineer to embed security across the software development lifecycle for Enterprise Applications platforms, based at Macquarie Park, NSW. The role focuses on secure development practices and hands-on cloud security across AWS/Azure environments.

You will collaborate with development and platform teams to implement secure-by-design principles, automate security controls, and strengthen CI/CD security with measurable risk reduction and audit-ready