Senior Platform Security Engineer – AI Infra (Sydney)

Matchbox; Sydney; Hybrid; AUD 150,000 - 230,000; Full time

Job summary

Firmus Technologies, based in Sydney, seeks a Senior Security Engineer to lead platform security across AI infrastructure. You will drive security design for cloud and on‑prem environments, partner with teams, and shape security culture to protect data and workloads.

The role requires hands-on experience with Kubernetes security, image signing, vulnerability scanning, and automated compliance. You will mentor engineers and advance security practices across the organization.

Qualifications

• Bachelor's degree in computer science or a related technical field.
• 7+ years of experience in Platform Security, DevSecOps, or Site Reliability Engineering.
• Strong proficiency in security standards and frameworks (CIS, NIST, ISO 27001, SOC 2).
• Experience with Kubernetes security, supply chain security, and cloud-native tooling.

Responsibilities

• Lead platform security efforts across cloud and on-prem environments.
• Own security standard for managed Kubernetes services and HPC products.
• Apply Kubernetes security best practices: RBAC, admission controllers, pod security, auditing, network policies.
• Implement supply chain security: image signing, vulnerability scanning, policy enforcement.
• Automate security in IaC pipelines and patch management.
• Collaborate with teams for automated compliance checks, secrets management, and IAM.

Skills

Kubernetes security

IaC security

Secrets management

Identity management

SSL/TLS management

Bash scripting

Education

Bachelor's degree in Computer Science or related field

Tools

Calico

kube-bench

Falco

Cosign

Trivy

Kyverno

Checkov

Snyk

HashiCorp Vault

Azure Key Vault

Auth0

Job description

Firmus Technologies, based in Sydney, seeks a Senior Security Engineer to lead platform security across AI infrastructure. You will drive security design for cloud and on‑prem environments, partner with teams, and shape security culture to protect data and workloads.

The role requires hands-on experience with Kubernetes security, image signing, vulnerability scanning, and automated compliance. You will mentor engineers and advance security practices across the organization.