Senior Security Engineer, Platform Engineering

Firmus Technologies; Sydney; On-site; AUD 150,000 - 210,000; Full time

Job summary

Firmus Technologies seeks an experienced Senior Security Engineer, Platform Engineering to drive platform security and partner with teams to standardize security management. The role focuses on secure cloud and on‑prem architectures, automation, and secure coding practices.

You will own security standards for Firmus Managed Kubernetes, apply best practices for cloud-native security, and lead initiatives in credentials, encryption, and security monitoring.

Qualifications

• Bachelor's degree in computer science or related field.
• 7+ years in Platform Security, DevSecOps or SRE.
• Solid understanding of security standards (NIST, ISO 27001, SOC 2).
• Experience with Kubernetes security, pod security, RBAC and network policies.
• Experience with IaC security scanning and secret management.
• Proficiency with scripting languages (Bash, Python, Go).
• Security certifications (CISSP, CKS, OSCP, cloud security) are a plus.

Responsibilities

• Lead platform security efforts across cloud and on‑prem environments.
• Own security standard for Kubernetes service with high‑performance computing products.
• Apply best practices for Kubernetes security, including RBAC and network policies.
• Implement supply chain security, image signing, vulnerability scanning, policy enforcement.
• Secure IaC pipelines with automated security scanning and testing.
• Automate patch management and ensure safe deployment rehearsals.
• Collaborate across teams on compliance, secrets mgmt, IAM and encryption.

Skills

Kubernetes security

Cloud security

CIS Benchmarks

OWASP Top 10

Scripting (Bash/Python/Go)

Identity and Privileged Access

TLS/SSL management

Education

Bachelor's degree in computer science

Tools

Cosign

Trivy

Kyverno

Checkov

Snyk

HashiCorp Vault

Job description

Firmus Technologies

Firmus Technologies is a globalleader pioneering the development and operation of efficient AI infrastructure across Asia Pacific.

Founded in Australia in 2019, our mission is to create the most efficient AI infrastructure by combiningcutting-edgetechnology with a steadfast commitment to sustainability.

At Firmus, we are unique in our approach. We design, build, andoperate a new class of digital infrastructure – the AI Factory. Through our model-to-grid technology approach, we have pushed the boundaries of multi-generational liquid cooling systems, energy management, AI software orchestration, and construction. For our customers, this approach allows us to make every watt count and deliver low-cost AI tokens globally.

Firmus AI Cloud

Our large-scale GPU cloud platform, Firmus AI Cloud, is purpose-built to deliver energy-efficient AIcomputeat scale to customers.

It empowers developers, enterprises, educational institutions, and government users to train and deploy AI models with unmatched efficiency and cost savings. With an ever-growing suite of services and applications, we are committed to delivering a cloud experience that is market-leading, proprietary, and built to scale.

ROLE SUMMARY

Firmus Technologies is seeking a Senior Security Engineer, Platform Engineering to join our AI Platforms team. You will drive the design and implementation of our platform security. You will also champion and partner with other teams to standardize security management and build internal security culture across the organization. This role is ideal for a self-starter with passion for building things from first principles. You naturally break down complex problems into their fundamental truths to uncover novel and elegant solutions—rather than relying on conventional patterns.

KEY RESPONSIBILITIES

• Lead platform security efforts by assessing risks, hardening platforms, and ensuring secure access for cloud and on-premises systems.
• Own the security standard for Firmus Managed Kubernetes Service for high-performance computing product offering to customers with NVIDIA H200 and GB300.
• Apply Kubernetes security best practices, including RBAC, admission controllers, pod security, auditing, and network policies.
• Implement supply chain security for Kubernetes, including image signing, vulnerability scanning, and policy enforcement.
• Secure infrastructure as code (IaC) pipelines with automated security scanning.
• Automate patch management for platform components, ensuring timely updates and robust testing before deployment.
• Experiment with AI/ML-powered tools to eliminate mundane tasks, know security posture quickly and take proactive action on drift or anomalies.
• Collaborate with other teams to align and enhance security posture on:
  • Automated compliance checks and reporting.
  • Secrets management for secure credential storage and auditing.
  • Identity and privileged access management for applications and remote access.
  • Encryption solutions, including SSL/TLS certificate management, to protect data in transit and at rest
  • Security monitoring and incident response.
  • Security awareness and guidance to engineering and operations teams.

SKILLS AND EXPERIENCE

• Bachelor’s degree in computer science or a related technical field.
• 7+ years of experience as Platform Security, DevSecOps or Site Reliability Engineer.
• Demonstrated strong proficiency on the following areas:
  • Security standards and frameworks, including CIS Benchmarks, NIST, ISO 27001, and SOC 2.
  • OWASP Top 10 security risks for applications and cloud-native infrastructure.
  • Kubernetes security and networking best practices with tools like Calico, kube-bench, or Falco.
  • Kubernetes supply chain security best practices with tools like Cosign, Trivy or Kyverno.
  • Automated IaC security scanning with tools like Checkov or Snyk.
  • Secrets management such as HashiCorp Vault or Azure Key Vault.
  • Identity Access Management and Privileged Access Management such as Auth0, Microsoft Entra, HashiCorp Boundary or Teleport.
  • SSL/TLS certificate management, including automated issuance, renewal, deployment, and monitoring.
• Competent in scripting and programming skills (e.g., Bash, Python, Go).
• Systems knowledge on Linux internals, networking stacks, and distributed storage.
• Clear and effective English communication, written and spoken.
• Security certifications (e.g., CISSP, CKS, OSCP, GCP/AWS/Azure Security).
• Bonus:
  • Experience in high-growth startups or regulated industries with robust security and data privacy requirements, including SOC 2 Type 2, ISO 27001, PCI DSS or HIPAA.
  • Experience applying security principles to AI/ML Ops environments.

Location & Reporting

• Location: Sydney, Australia
• Reporting to General Manager, Finance

Employment Basis

Full-time

Diversity

At Firmus, we are committed to building a diverse and inclusive workplace. We encourage applications from candidates of all backgrounds who are passionate about creating a more sustainable future through innovative engineering solutions.

Join us in our mission to revolutionize the AI industry through sustainable practices and cutting-edge engineering.