Secure DevSecOps Engineer: Cloud, CI/CD & IAM

Transport for NSW; Sydney; Híbrido; AUD 120 000 - 180 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Flexible work options

Resumo da oferta

Transport for NSW is seeking a security-focused engineer to embed secure development practices across Enterprise Applications platforms. You will protect critical infrastructure, implement automated security controls, and drive risk reduction through IaC, CI/CD security, and threat prevention.

You will work with cloud environments (AWS/Azure), IAM, WAF, Zero Trust, and incident remediation, while promoting DevOps alignment and secure-by-design principles for rapid, safe delivery.

Qualificações

• Experience securing cloud infrastructure (AWS/Azure).
• Hands-on with Infrastructure as Code (IaC).
• Knowledge of IAM, RBAC, encryption and secrets management.
• Experience implementing secure-by-design in SDLC and CI/CD pipelines.

Responsabilidades

• Embed security across the software development lifecycle for Enterprise Applications platforms.
• Automate security controls and guardrails for rapid delivery with reduced risk.
• Implement secure development practices including automated code and infrastructure scanning, container security and CI/CD pipeline security.
• Deliver reusable, compliant security solutions with measurable risk reduction and audit-ready assurance.

Conhecimentos

Cloud security

IaC (Infrastructure as Code)

CI/CD security

Identity & access management

Zero Trust

Security scanning (SAST/DAST)

Scripting: Python/Bash/PowerShell

WAF

Vulnerability remediation

Ferramentas

Airlock

CrowdStrike

Qualys

Prisma

Descrição da oferta de emprego

Transport for NSW is seeking a security-focused engineer to embed secure development practices across Enterprise Applications platforms. You will protect critical infrastructure, implement automated security controls, and drive risk reduction through IaC, CI/CD security, and threat prevention.

You will work with cloud environments (AWS/Azure), IAM, WAF, Zero Trust, and incident remediation, while promoting DevOps alignment and secure-by-design principles for rapid, safe delivery.