Senior Platform Security Engineer - Kubernetes & IaC

re-zoo-me; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Job summary

Firmus Technologies in Sydney, Australia, is seeking a Senior Security Engineer, Platform Engineering to lead the design and implementation of our platform security across on-prem and cloud environments.

You will champion security standards, partner with product and operations teams, and drive secure-by-default practices for Kubernetes, CI/CD, and data protection, contributing to energy-efficient AI infrastructure.

Qualifications

• Minimum 7+ years in platform security or DevSecOps.
• Experience with cloud and on-premises security controls.
• Knowledge of CIS, NIST, ISO 27001, SOC 2 frameworks.

Responsibilities

• Lead platform security efforts by assessing risks and hardening platforms.
• Own security standard for Firmus Managed Kubernetes Service for HPC with NVIDIA H200/GB300.
• Apply Kubernetes security best practices (RBAC, admission controllers, network policies).
• Implement supply chain security for Kubernetes (image signing, vulnerability scanning).
• Secure IaC pipelines with automated security scanning.
• Automate patch management and testing before deployment.
• Collaborate with teams to enhance security posture (compliance checks, secrets mgmt, IAM, encryption, monitoring).

Skills

7+ years Platform Security

Kubernetes security

IaC security scanning

Secrets management

IAM / Privileged Access

SSL/TLS management

Scripting (Bash/Python/Go)

Security certifications

English communication

Education

Bachelor's degree in computer science or related field

Tools

Calico

kube-bench

Falco

Cosign

Trivy

Kyverno

Checkov

Snyk

HashiCorp Vault

Azure Key Vault

Job description

Firmus Technologies in Sydney, Australia, is seeking a Senior Security Engineer, Platform Engineering to lead the design and implementation of our platform security across on-prem and cloud environments.

You will champion security standards, partner with product and operations teams, and drive secure-by-default practices for Kubernetes, CI/CD, and data protection, contributing to energy-efficient AI infrastructure.