DevSecOps Engineer - shift

OpenTalent; Sydney; On-site; AUD 140,000 - 180,000; Full time

Job summary

Shift is seeking a hands-on DevSecOps professional to own complex cloud infrastructure and security end to end in Australia. You will influence design, security controls and deployment pipelines across production environments, enabling engineers while maintaining strong risk controls.

You’ll partner with engineering to bake security into the lifecycle, monitor emerging threats, and lead remediation initiatives to ensure resilient systems.

Qualifications

• 3-5+ years in a cloud infrastructure or security-focused role.
• Hands-on experience with Azure IaaS and PaaS.
• Proficiency in at least one scripting or programming language (Python, PowerShell, Bash or C#).
• Hands-on experience with Docker and Kubernetes, with working knowledge of Helm.
• A solid grasp of security fundamentals (IAM, WAF, vulnerability management) backed by real implementation experience.

Responsibilities

• Lead complex DevOps and security initiatives across Shift's cloud environments, from design through to delivery.
• Build, maintain and continuously improve our automated deployment pipelines using DevOps best practice.
• Drive security testing, vulnerability scanning and remediation across production, data and operational infrastructure.
• Set the standard for security best practice - policies, risk assessments, controls and processes and guide the wider infrastructure team in applying it.
• Keep a live watch on emerging security threats and industry trends, and get ahead of risk before it becomes an incident.
• Partner closely with our engineering teams to embed security into applications and tooling from the start.
• Identify infrastructure and security uplift work that's been queued for too long, and lead it end to end - we'd rather fix things properly once than patch them repeatedly.

Skills

Security fundamentals

Cloud infrastructure experience

Scripting experience

Security leadership

Tools

Azure

Docker

Kubernetes

Helm

Job description

Who is Shift?

At Shift, we’re business specialists dedicated to helping Australian SMEs take control of their cashflow, streamline trade terms and choose the right financial products.

We believe Australian businesses are the driving force behind our economy and are core to our communities. That’s why our business expertise, focus on relationships, and market‑leading technology is at the core of everything we do. We’ve helped solve the credit and payment pain points for more than 30,000 businesses, providing over $6 billion in aggregate funding.

Our unique approach to product innovation combined with our collaborative culture means you can build your career in a supportive environment. You’ll be joining a diverse team of over 300 people who are always looking to deliver better outcomes for Australian businesses.

About the role

At Shift, DevSecOps isn't a ticket queue. You won't be handed a change request and told to execute it, you'll be one of the people deciding how our cloud infrastructure gets built, secured and kept running. Our engineers carry real decision‑making power, not just delivery responsibility, and the problems you'll be solving are ours alone to solve, because our data and decisioning capability is what makes Shift Shift.

This is a hands‑on role for someone who wants to own complex infrastructure and security work end to end.

What you'll do

• Lead complex DevOps and security initiatives across Shift's cloud environments, from design through to delivery.
• Build, maintain and continuously improve our automated deployment pipelines using DevOps best practice.
• Drive security testing, vulnerability scanning and remediation across production, data and operational infrastructure.
• Set the standard for security best practice - policies, risk assessments, controls and processes and guide the wider infrastructure team in applying it.
• Keep a live watch on emerging security threats and industry trends, and get ahead of risk before it becomes an incident.
• Partner closely with our engineering teams to embed security into applications and tooling from the start.
• Identify infrastructure and security uplift work that's been queued for too long, and lead it end to end - we'd rather fix things properly once than patch them repeatedly.

What you'll bring

• 3-5+ years in a cloud infrastructure or security-focused technology role.
• Strong hands‑on experience with Azure (IaaS and PaaS).
• Proficiency in at least one scripting or programming language (Python, PowerShell, Bash or C#).
• Hands‑on experience with Docker and Kubernetes, with working knowledge of Helm.
• A solid grasp of security fundamentals (IAM, WAF, vulnerability management) backed by real implementation experience.