Senior Platform Security Engineer (Kubernetes & IaC)

Firmus Technologies; Sydney; On-site; AUD 150,000 - 210,000; Full time

Job summary

Firmus Technologies seeks an experienced Senior Security Engineer, Platform Engineering to drive platform security and partner with teams to standardize security management. The role focuses on secure cloud and on‑prem architectures, automation, and secure coding practices.

You will own security standards for Firmus Managed Kubernetes, apply best practices for cloud-native security, and lead initiatives in credentials, encryption, and security monitoring.

Qualifications

• Bachelor's degree in computer science or related field.
• 7+ years in Platform Security, DevSecOps or SRE.
• Solid understanding of security standards (NIST, ISO 27001, SOC 2).
• Experience with Kubernetes security, pod security, RBAC and network policies.
• Experience with IaC security scanning and secret management.
• Proficiency with scripting languages (Bash, Python, Go).
• Security certifications (CISSP, CKS, OSCP, cloud security) are a plus.

Responsibilities

• Lead platform security efforts across cloud and on‑prem environments.
• Own security standard for Kubernetes service with high‑performance computing products.
• Apply best practices for Kubernetes security, including RBAC and network policies.
• Implement supply chain security, image signing, vulnerability scanning, policy enforcement.
• Secure IaC pipelines with automated security scanning and testing.
• Automate patch management and ensure safe deployment rehearsals.
• Collaborate across teams on compliance, secrets mgmt, IAM and encryption.

Skills

Kubernetes security

Cloud security

CIS Benchmarks

OWASP Top 10

Scripting (Bash/Python/Go)

Identity and Privileged Access

TLS/SSL management

Education

Bachelor's degree in computer science

Tools

Cosign

Trivy

Kyverno

Checkov

Snyk

HashiCorp Vault

Job description

Firmus Technologies seeks an experienced Senior Security Engineer, Platform Engineering to drive platform security and partner with teams to standardize security management. The role focuses on secure cloud and on‑prem architectures, automation, and secure coding practices.

You will own security standards for Firmus Managed Kubernetes, apply best practices for cloud-native security, and lead initiatives in credentials, encryption, and security monitoring.