Staff Engineer | Cyber Security

Macquarie Bank Limited; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Wellbeing leave

Parental leave up to 20 weeks

Volunteer leave and donation matching

Employee Assistance Program

Learning & development support

Hybrid and flexible working

Job summary

Macquarie Bank Limited is seeking a Security Engineer to build and deliver machine identity and authentication systems at enterprise scale. You will implement workload identity infrastructure that integrates with cloud platforms, API gateways, and service meshes, while automating identity lifecycles and delivering secure tooling.

The role requires hands-on coding in Python/Go, strong knowledge of IAM across multiple layers, and the ability to mentor engineers to raise the engineering bar within

Qualifications

• Experience building and operating workload identity infrastructure at scale.
• Experience across identity layers: human IAM, application auth (OAuth/OIDC), cloud IAM, and API gateways.
• Production code experience (Python/Go) and debugging distributed auth failures.
• Ability to mentor engineers and influence engineering practices.

Responsibilities

• Build and deliver machine identity and authentication systems at scale.
• Integrate workload identity with cloud platforms, API gateways, and service meshes.
• Develop identity lifecycle automation and secure tooling.
• Lead and review code to raise engineering standards within the squad.

Skills

Machine identity

OAuth/OIDC

Cloud IAM

JWTs

SPIFFE/SPIRE

HashiCorp Vault

Service mesh

Python

Go

Mentorship

Tools

Python

Go

OAuth/OIDC

HashiCorp Vault

SPIFFE/SPIRE

JWTs

Kubernetes

API gateways

Job description

BFS - Security Engineer, Technology - Engineering

Our team enables secure service-to-service authentication at enterprise scale. We architect machine identity systems and authentication integration layers across Macquarie, ensuring every service, API, and workload across 31 markets can authenticate securely without human intervention. We design how workload identity integrates with human IAM, cloud platforms, and API gateways to create unified zero-trust architecture.

We are a global financial services group operating in 30 markets with 57 years of unbroken profitability. At Macquarie, you’re empowered to shape a career that is fulfilling and creates value. You will bring your insights and expertise to the task at hand and feel supported as you make your own kind of impact for a better future.

What role will you play?

You will build and deliver machine identity and authentication systems at Macquarie through hands-on engineering and technical leadership within your squad. You will solve hard problems, implementing workload identity infrastructure that integrates with cloud platforms, API gateways, and service meshes; building identity lifecycle automation that works at scale; delivering authentication solutions that span multiple identity layers. You will write production code, build tooling backed by working prototypes, own technical decisions within your domain, and raise the engineering bar through code review and mentorship.

What you offer

• Experience building and operating workload identity infrastructure at scale - provisioning, rotating, and revoking identities for services across distributed systems
• Experience implementing across identity layers: human IAM, application auth (OAuth/OIDC), cloud IAM (AWS/Azure/GCP), and API gateways—making them work together in practice
• Knowledge of when machine identity should replace secrets, when to use attested identities vs tokens, and how to implement federation; you prove your views with working code and production data
• Experience that you ship production code (Python, Go), review architecture, debug distributed auth failures, and mentor engineers; you influence through working systems, not presentations
• Ability to engage with emerging identity patterns, contribute to internal standards, and bring practical improvements into the team's engineering practices
• Understanding of identity protocols, JWTs, and signing well enough to build secure identity systems on top
• Experience in identity lifecycle automation, SPIFFE/SPIRE implementation, HashiCorp Vault operation, service mesh or API gateway auth integration, or open-source contributions in identity projects is highly regarded.

What we offer

At Macquarie, you’re empowered to shape a career that’s rewarding in all the ways that matter most to you.

Macquarie employees can access a wide range of benefits which, depending on employment type, include:

• 1 wellbeing leave day per year
• Up to 5 additional service bonus leave days per year
• Up to 20 weeks’ paid parental leave for primary caregivers along with 12 days of transition leave upon return to work, and 6 weeks’ paid leave for non-primary caregivers
• 2 days of paid volunteer leave and donation matching
• Up to 12 months’ gender affirmation leave, including 6 weeks’ paid leave
• Access to Employee Assistance Program and wellbeing benefits including skin and health checks, and flu vaccinations
• Access to a wide range of salary packaging options
• Access to a wide range of learning and development opportunities, including reimbursement for professional membership or subscription
• Hybrid and flexible working arrangements, dependent on role
• Reimbursement for work from home equipment

About Technology

Technology enables every aspect of Macquarie, for our people, our customers and our communities. We’re a global team that is passionate about accelerating the digital enterprise, connecting people and data, building platforms and applications and designing tomorrow’s technology solutions.

Inclusion at Macquarie

We are committed to providing an inclusive environment for all, where different experiences, skills and perspectives are valued and respected. Macquarie provides access to opportunities for all individuals regardless of race, colour, religion, sex, sexual orientation, national origin, age, disability, protected veteran status, genetic information, marital status, gender identity or any other characteristic or circumstance.

We provide reasonable adjustments to individuals who may need support during the recruitment process and employment. If you require an adjustment, please let us know during the application process.