Lead DevSecOps Engineer - Cloud, Security & CI/CD

Shift; North Sydney Council; Hybrid; AUD 150,000 - 210,000; Full time

Benefits offered by this job

Collaborative teams

Roadmap alignment every 100 days

Flexible work policy

Parental leave

Office spaces designed for collision

Wellbeing benefits

Job summary

Shift is building a security‑driven cloud platform for Australian SMEs. The role leads complex DevSecOps initiatives across Shift's cloud environments, focusing on secure design, deployment, and operations.

You will collaborate with engineering to embed security from the start, drive vulnerability management, and shape security policies while growing in a fast-paced, lean team.

Qualifications

• 3-5+ years in a cloud infrastructure or security-focused technology role.
• Strong hands-on experience with Azure (IaaS and PaaS).
• Proficiency in scripting languages (Python, PowerShell, Bash or C#).
• Hands-on experience with Docker and Kubernetes, with Helm knowledge.
• Solid grasp of security fundamentals (IAM, WAF, vulnerability management).
• Experience with CSPM/KSPM tooling, network security controls, and secrets management.

Responsibilities

• Lead complex DevOps and security initiatives across Shift's cloud environments, from design through to delivery.
• Build, maintain and continuously improve automated deployment pipelines using DevOps best practice.
• Drive security testing, vulnerability scanning and remediation across production, data and infrastructure.
• Set the standard for security best practices—policies, risk assessments, controls and processes.
• Monitor emerging security threats and industry trends to stay ahead of risk.
• Partner with engineering teams to embed security into applications and tooling from the start.
• Identify infrastructure and security uplift work and lead it end to end.

Skills

Cloud infrastructure

Security-focused role

Azure (IaaS/PaaS)

Python

PowerShell

Bash

C#

Docker

Kubernetes

Helm

IAM

WAF

Vulnerability management

CSPM/KSPM tooling

CI/CD

GitHub Enterprise

GitOps

Flux CD

Argo CD

Dynatrace

Azure Key Vault

Network security controls

Tools

Docker

Kubernetes

Helm

GitHub Enterprise

Flux CD

Argo CD

Dynatrace

Azure Key Vault

Job description

Who is Shift?

At Shift, we’re business specialists dedicated to helping Australian SMEs take control of their cashflow, streamline trade terms and choose the right financial products.

Who is Shift?

At Shift, we’re business specialists dedicated to helping Australian SMEs take control of their cashflow, streamline trade terms and choose the right financial products.

We believe Australian businesses are the driving force behind our economy and are core to our communities. That’s why our business expertise, focus on relationships, and market-leading technology is at the core of everything we do. We’ve helped solve the credit and payment pain points for more than 30,000 businesses, providing over $6 billion in aggregate funding.

Our unique approach to product innovation combined with our collaborative culture means you can build your career in a supportive environment. You’ll be joining a diverse team of over 300 people who are always looking to deliver better outcomes for Australian businesses.

About the role:

At Shift, DevOps isn't a ticket queue. You won't be handed a change request and told to execute it, you'll be one of the people deciding how our cloud infrastructure gets built, secured and kept running. Our engineers carry real decision-making power, not just delivery responsibility, and the problems you'll be solving are ours alone to solve, because our data and decisioning capability is what makes Shift Shift. This is a hands-on role for someone who wants to own complex infrastructure and security work end to end.

What you'll do:

• Lead complex DevOps and security initiatives across Shift's cloud environments, from design through to delivery.
• Build, maintain and continuously improve our automated deployment pipelines using DevOps best practice.
• Drive security testing, vulnerability scanning and remediation across production, data and operational infrastructure.
• Set the standard for security best practice - policies, risk assessments, controls and processes and guide the wider infrastructure team in applying it.
• Keep a live watch on emerging security threats and industry trends, and get ahead of risk before it becomes an incident.
• Partner closely with our engineering teams to embed security into applications and tooling from the start.
• Identify infrastructure and security uplift work that's been queued for too long, and lead it end to end - we'd rather fix things properly once than patch them repeatedly.
  
  

What you'll bring:

• 5+ years in a cloud infrastructure or security-focused technology role.
• Strong hands-on experience with Azure or AWS (IaaS and PaaS) - we run on Azure, but strong AWS experience that translates across is welcome.
• Proficiency in at least one scripting or programming language (Python, PowerShell, Bash or C#).
• Hands-on experience with Docker and Kubernetes, with working knowledge of Helm.
• A solid grasp of security fundamentals (IAM, WAF, vulnerability management) backed by real implementation experience.
• Experience with CSPM/KSPM tooling, network security controls (NSGs, application gateways, firewalls, private links), and secrets management (Azure Key Vault).
• Proven experience building and managing CI/CD pipelines (GitHub Enterprise, GitOps via Flux CD or Argo CD, Octopus Deploy).
• Azure Entra ID experience is preferred; exposure to Azure SQL or APM tooling like Dynatrace is a bonus.
• Comfort with ambiguity and a bias for figuring things out rather than waiting for a playbook - the tempo here is fast and the team is lean.
  
  

Key benefits:

• Collaborative teams – a flat structure means everyone can learn from colleagues and senior leaders around the business.
• Be involved – come together with all of your colleagues every 100 days to share the product and technology roadmap and business strategy.
• Flexible working environment – we’re headquartered in North Sydney with state-based workplaces and offer a flexible work policy.
• Family support – industry leading 26 weeks paid parental leave.
• Purpose built spaces within our office – designed for collaboration, brainstorming, socialising, and focused work.
• Range of benefits supporting your physical, psychological and financial wellbeing. From a day off on your birthday to excellent end of trip facilities.