Principal DevSecOps Engineer: Secure Cloud Platform Lead

OFX; Sydney; Hybrid; AUD 180,000 - 260,000; Full time

Benefits offered by this job

Hybrid work model

Learning opportunities

Volunteer day

Job summary

OFX is seeking a Principal Engineer, DevSecOps to own the secure, automated platform that powers our payments and internal systems. You will drive the paved road with GitHub Actions, IAM, secrets management and CSPM tooling, while mentoring teams and shaping security roadmaps.

You will collaborate across engineering and security, lead incident reviews, and guide on-call readiness. A security certification and fintech experience are highly valued.

Qualifications

• 10+ years designing and operating production AWS workloads in medium to large environments.
• 10+ years CI/CD across pipelines with Jenkins, GitLab CI, Azure DevOps or CircleCI; strong GitHub Actions usage.
• A genuine software engineering background in TS, Python, Go or C#, with tests and release discipline.
• Cloud security engineering: IAM, RBAC, SSO, MFA, secrets management and CSPM tools like Wiz.
• Experience embedding security into pipelines: SAST, SCA, secrets, IaC scanning and policy-as-code.
• Automation of compliance evidence to ISO 27001, SOC 2, PCI DSS; AWS Well-Architected alignment.
• Incident leadership and post-incident reviews under change control.
• Experience with event-driven/serverless or distributed SaaS/fintech architectures.
• Clear communications with technical and non-technical stakeholders; on-call readiness.
• AWS Pro or relevant security certification; desirable in financial services/payments.

Responsibilities

• Own the health, security and evolution of OFX's AWS estate and pipelines.
• Set direction for cloud infra, delivery pipelines and security controls.
• Build and run a secure paved road enabling fast, compliant production releases.
• Review infra and pipeline changes, mentor teams on cloud and security practices.
• Collaborate with Engineering Directors and Security to shape platform roadmaps.
• Lead by example in code, design and incident response; set practical standards.

Skills

AWS

CI/CD

Security engineering

TypeScript

Leadership

GitHub Actions

Jenkins

GitLab CI

Wiz

Tools

GitHub Actions

Jenkins

CircleCI

Terraform

Wiz

Job description

OFX is seeking a Principal Engineer, DevSecOps to own the secure, automated platform that powers our payments and internal systems. You will drive the paved road with GitHub Actions, IAM, secrets management and CSPM tooling, while mentoring teams and shaping security roadmaps.

You will collaborate across engineering and security, lead incident reviews, and guide on-call readiness. A security certification and fintech experience are highly valued.