Senior DevSecOps Engineer: Cloud Security & CI/CD

Shift; Sydney; On-site; AUD 140,000 - 190,000; Full time

Benefits offered by this job

26 weeks parental leave

Flexible work policy

North Sydney HQ

Job summary

Shift is seeking a hands-on DevSecOps engineer in Sydney to own complex infrastructure and security end to end.

You will design, build, and secure cloud deployments across Azure, containerized environments, and CI/CD pipelines while partnering with lean engineering teams.

The role offers flexible work, collaborative culture, and a strong emphasis on security-first delivery from a market-leading Australian fintech/services company.

Qualifications

• 3-5+ years in a cloud infrastructure or security-focused technology role.
• Strong hands-on experience with Azure (IaaS and PaaS).
• Proficiency in at least one scripting or programming language (Python, PowerShell, Bash or C#).
• Hands-on experience with Docker and Kubernetes, with working knowledge of Helm.
• A solid grasp of security fundamentals (IAM, WAF, vulnerability management) backed by real implementation experience.
• Experience with CSPM/KSPM tooling, network security controls (NSGs, application gateways, firewalls, private links), and secrets management (Azure Key Vault).
• Proven experience building and managing CI/CD pipelines (GitHub Enterprise, GitOps via Flux CD or Argo CD, Octopus Deploy).
• Azure Entra ID experience is preferred; exposure to Azure SQL or APM tooling like Dynatrace is a bonus.
• Comfort with ambiguity and a bias for figuring things out rather than waiting for a playbook - the tempo here is fast and the team is lean.
• Collaborative teams – a flat structure means everyone can learn from colleagues and senior leaders around the business.
• Be involved – come together with all of your colleagues every 100 days to share the product and technology roadmap and business strategy.
• Flexible working environment – we’re headquartered in North Sydney with state‑based workplaces and offer a flexible work policy.
• Family support – industry leading 26 weeks paid parental leave.
• Purpose built spaces within our office – designed for collaboration, brainstorming, socialising, and focused work.
• Range of benefits supporting your physical, psychological and financial wellbeing. From a day off on your birthday to excellent end of trip facilities.

Responsibilities

• Lead complex DevOps and security initiatives across Shift's cloud environments, from design through to delivery.
• Build, maintain and continuously improve our automated deployment pipelines using DevOps best practice.
• Drive security testing, vulnerability scanning and remediation across production, data and operational infrastructure.
• Set the standard for security best practice - policies, risk assessments, controls and processes and guide the wider infrastructure team in applying it.
• Keep a live watch on emerging security threats and industry trends, and get ahead of risk before it becomes an incident.
• Partner closely with our engineering teams to embed security into applications and tooling from the start.
• Identify infrastructure and security uplift work that's been queued for too long, and lead it end to end - we'd rather fix things properly once than patch them repeatedly.

Skills

Cloud infra

Security basics

CI/CD

Scripting

Tools

Azure

Docker

Kubernetes

Helm

GitHub Enterprise

Flux CD

Argo CD

Octopus Deploy

Dynatrace

Azure Key Vault

Job description

Shift is seeking a hands-on DevSecOps engineer in Sydney to own complex infrastructure and security end to end.

You will design, build, and secure cloud deployments across Azure, containerized environments, and CI/CD pipelines while partnering with lean engineering teams.

The role offers flexible work, collaborative culture, and a strong emphasis on security-first delivery from a market-leading Australian fintech/services company.