Senior Cloud Security Engineer - IaC/Policy & CNAPP

Westpac Group; Sydney; Hybrid; AUD 140,000 - 210,000; Full time

Benefits offered by this job

Flexible work arrangements

Leave options: Culture, Lifestyle and

Learning and development opportunities

Volunteer opportunities

Support for veterans and diverse staff

Job summary

Westpac Group is seeking a Senior Engineer, Security Controls Assessment to hands‑on design, build and validate automated security controls across GCP and AWS. You will embed IaC and PaC guardrails and lead CNAPP adoption with Wiz, while integrating controls into CI/CD pipelines.

You’ll partner with Cloud Platform and Engineering teams to strengthen secure cloud, IaC and policy standards, and drive security by design in a regulated financial technology environment.

Qualifications

• Strong cloud security engineering across GCP and AWS, with GCP preferred.
• Hands-on IaC and PaC, especially Terraform.
• DevSecOps experience: embed security in CI/CD flows with GitHub Enterprise, Harness.io.
• Experience with Wiz/CNAPP and securing Kubernetes (GKE/EKS).
• Strong Python automation and evidence collection for security controls.
• Familiar with CIS, NIST and APRA CPS 234 security frameworks.

Responsibilities

• Design, build and maintain automated security controls across GCP/AWS (IAM, network, encryption, monitoring, Kubernetes).
• Develop IaC and PaC using Terraform, OPA/Rego, Sentinel and policy governance.
• Lead Wiz rollout and integration across identity, security ops, ticketing and engineering.
• Embed automated scanning and policy controls into CI/CD pipelines (IaC, secrets, containers).
• Build continuous controls monitoring and automated evidence collection per CIS/NIST/APRA 234.
• Collaborate with Cloud Platform and Engineering to enforce Security by Design.

Skills

Cloud security

IaC (Terraform)

PaC (Policy as Code)

DevSecOps

CNAPP Wiz

Kubernetes security

Python automation

Security frameworks

Tools

Terraform

OPA/Rego

Sentinel

GCP Org Policies

AWS SCPs

GitHub Enterprise

Harness.io

Wiz

GKE

EKS

Job description

Westpac Group is seeking a Senior Engineer, Security Controls Assessment to hands‑on design, build and validate automated security controls across GCP and AWS. You will embed IaC and PaC guardrails and lead CNAPP adoption with Wiz, while integrating controls into CI/CD pipelines.

You’ll partner with Cloud Platform and Engineering teams to strengthen secure cloud, IaC and policy standards, and drive security by design in a regulated financial technology environment.