Platform Engineer – API Security

Trideca; City of Melbourne; On-site; AUD 140,000 - 210,000; Full time

Job summary

Trideca invites a Platform Engineer to lead enterprise API security, policy as code, and robust cloud infrastructure. You will shape policy design, deploy controls, and govern code-driven security across AWS, GKE, and Kubernetes. Join a high-impact team delivering secure, scalable platform solutions in a collaborative setting.

You will mentor engineers, drive Helm changes at scale, and champion best practices in a platform leadership role, reporting to the Head of Technology and Governance.

Qualifications

• Strong API security fundamentals and Top 10 awareness.
• Experience writing policy as code (OPA/Rego, Istio AuthorizationPolicy).
• Hands-on Kubernetes in enterprise environments (GKE/EKS).
• Terraform for cloud provisioning and optimization.
• CI/CD and DevSecOps practices in a corporate setting.
• Proficient in Golang and Python; building agentic workflows.

Responsibilities

• Author and deploy security policies through the service mesh with OWASP Top 10 alignment.
• Design and roll out API security policies covering auth and rate limiting.
• Own pipelines applying policies across the enterprise in AWS, GKE and Kubernetes.
• Deliver large-scale Helm changes via GitOps with Argo CD and safe rollout.
• Set standards for identity, traffic, and security across teams.
• Migrate live API traffic onto the enterprise gateway with minimal downtime.
• Lead brown bag sessions and promote engineering best practices.

Skills

API security

Policy as code

Kubernetes

Istio

GitOps

Terraform

CI/CD

Golang

Python

AWS

GKE

Docker

Networking

Clear communicator

Education

Bachelor degree in IT/CS

Tools

Argo CD

Envoy

OPA/Rego

Kubernetes

Terraform

Job description

Trideca is Australia's trusted strategy, AI, and digital transformation partner, helping some of the nation's largest enterprises (including NAB, Suncorp, Optus, Medibank, and AGL) drive meaningful business impact through technology.

With offices in Melbourne and Sydney and projects spanning multiple industries, we thrive on solving complex challenges, delivering cutting-edge solutions, and pushing the boundaries of what's possible.

Trideca is partnering with aleading Australian enterprise for a Platform Engineer to drive its API security program, reporting to the Head of Technology, Integration Design and Governance. You will author and deploy the security policies that protect the organisation's APIs against external threats, using service mesh to enforce controls aligned to the OWASP API Security Top 10, and you will own the pipelines that apply those policies across the enterprise.

This role combines hands-on security engineering with platform leadership. Alongside building key infrastructure in AWS, GKE and Kubernetes, you will champion engineering best practice across the team, run brown bag sessions, and drive continuous improvement in the Kubernetes platform, Helm deployment practices and the way policies are applied through GitOps with Argo CD.

What You'll Be Doing

• Author and deploy security policies through the service mesh, with controls aligned to the OWASP API Security Top 10.
• Design and roll out API security policies covering authentication, authorisation and rate limiting, using metrics, logs and alerts to move from audit to enforcement without breaking consumers.
• Own the pipelines that apply policies across the enterprise, and create key infrastructure in AWS, GKE and Kubernetes.
• Deliver large-scale Helm changes through GitOps with Argo CD, with safe rollout, rollback and minimal service disruption.
• Set clear standards for identity, traffic and security so every team builds on the same secure defaults.
• Migrate live API traffic onto the enterprise gateway across many teams without downtime.
• Run brown bag sessions and champion engineering best practice across the team.

What You Bring

• Strong API security fundamentals, including the OWASP API Security Top 10.
• Experience writing policy as code, such as OPA/Rego, Kubernetes Network Policies or Istio AuthorizationPolicy.
• A clear understanding of how authentication and authorisation work for both services and users across gateways and service mesh.
• Expert Helm skills in an enterprise environment, including planning and delivering Helm changes at scale.
• Five or more years in a large corporate or enterprise environment, ideally as a Platform Engineer or Staff Engineer, with a track record of building, testing and operating production services.
• Expert Kubernetes (EKS or GKE) and Docker skills, underpinned by a deep understanding of networking architecture.
• Infrastructure as Code with Terraform, used to provision, manage and optimise cloud platforms at scale.
• Experience building and supporting CI/CD pipelines and DevSecOps practices in a corporate environment.
• Strong development skills in Golang and Python, including building agentic workflows.
• The ability to architect comprehensive cloud solutions to complex business problems, moving comfortably between the detail and the big picture.
• Clear communication and a collaborative approach, with the confidence to ask questions, explain trade-offs, work through problems with others and guide Cloud Engineers at all levels.
• A degree in Information Technology, Computer Science or a related field, or equivalent practical experience.

Nice to Have

• Production Istio and Envoy experience in an enterprise environment, including gateways, mTLS and AuthorizationPolicy.
• CKA certification.
• Practical use of AI-assisted engineering tools, and an interest in modern ways of working that lift automation, code quality and operational efficiency.

Why This Role

• Ownership of an enterprise API security program, from policy design through to the pipelines that enforce it.
• A security brief with real engineering depth, bringing policy as code, service mesh, GitOps and cloud infrastructure together in one role.
• Visible impact, with the controls you design protecting APIs across the enterprise and the standards you set becoming every team's secure defaults.
• A platform leadership role, sharing knowledge through brown bag sessions and mentoring engineers at every level.

Why Choose Trideca?

Empowering Women in Technology:

We are committed to closing the gender gap in technology. With our dedicated road map for women, you'll find tailored opportunities to advance your career, supported by mentorship, leadership programs, Women in Technology Chapter and inclusive policies like menstruation leave and flexible working options.

Growth Through Learning:

Your growth is our priority. At Trideca, you'll have access to a wide range of learning and development initiatives, from certifications and workshops to personal development programs, ensuring you are always at the forefront of technology and innovation.

Work Your Way:

Our flexible work policy supports you to balance your personal and professional life.

Clients Come First

We obsess over our clients; they mean everything to us and are central to everything we do. We take the time to understand them, so we can deliver outstanding experiences and create moments of WOW.

Achieve Greatness Together

Business is a team sport, and we are here to win. We respect, value, and inspire each other to bring our best to raise the bar. We will high‑five you when you've nailed it and have honest discussions when you don't.

We Celebrate Our Differences

We are stronger and more successful when we include and appreciate different backgrounds, ideas, and experiences. Diversity helps us be more creative, solve problems better, and achieve more. By valuing everyone's unique contributions, we create a cohesive workplace where everyone can thrive and grow.

Own Your Space

We own our space, relationships, and client outcomes. We are fully committed and accountable to ourselves and each other; we deliver what we commit to. We adopt a commercial outlook and expect everyone to think and make decisions like we are the CEO.

Debate, Agree, Commit

We champion open dialogue where every voice matters and ideas are rigorously challenged to create stronger solutions. Once we reach alignment, we commit fully as one team and execute with excellence and accountability.

Have Fun, Go Nuts

No explanation is required, have fun, go nuts.

We also believe that the unique contributions of everyone at Trideca is the driver of our success. To ensure that our products and culture continue to embrace everyone's perspectives and experiences, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, marital status, veteran status, or disability. We are passionate about creating a workplace that fosters active participation and provides an equal playing field, where merit and accomplishment are the sole criteria for success. We encourage candidates from all backgrounds to apply. We celebrate the diversity of our workforce and are dedicated to creating an environment where everyone feels welcome, valued, and included.