Senior Cloud Platform IAM Security Engineer

Xero; City of Melbourne; Hybrid; AUD 140,000 - 190,000; Full time

Job summary

Xero is seeking a Senior Engineer for the Cloud Platform Access team to design and operate identity and access controls at scale across AWS, GCP, and Azure. The role blends hands-on technical leadership with building guardrails that enable teams to ship quickly without privilege creep.

You will mentor engineers, foster psychological safety, and work across security, platform, and product teams to ship secure-by-default controls early in delivery, in a hybrid Melbourne-based environment.

Qualifications

• Experience securing at least one public cloud (AWS, GCP, or Azure) and willingness to learn others.
• Experience designing and maintaining reusable Terraform modules and automation for IAM controls.
• Strong software engineering foundations; automation-first mindset; Python or another scripting language.
• Experience leading design discussions and mentoring engineers.
• Collaborative approach across security, platform, and product teams.
• Interest in thoughtful AI applications to accelerate engineering workflows.

Responsibilities

• Design and operate identity and access controls at scale across AWS, GCP, and Azure.
• Mentor engineers and foster psychological safety on the team.
• Collaborate with security, platform, and product teams to ship secure-by-default controls early in delivery.
• Evolve reusable Terraform modules and internal tooling for standardised secure access patterns.
• Establish KPI baselines and contribute to design reviews, operations, and mentoring within the team.

Skills

Public cloud security

Terraform

Python

IAM

Automation

Mentoring

Tools

Terraform

CI/CD

Job description

Xero is seeking a Senior Engineer for the Cloud Platform Access team to design and operate identity and access controls at scale across AWS, GCP, and Azure. The role blends hands-on technical leadership with building guardrails that enable teams to ship quickly without privilege creep.

You will mentor engineers, foster psychological safety, and work across security, platform, and product teams to ship secure-by-default controls early in delivery, in a hybrid Melbourne-based environment.