Staff Engineer - Secure Workload Identity & Zero-Trust

Macquarie Bank Limited; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Wellbeing leave

Parental leave up to 20 weeks

Volunteer leave and donation matching

Employee Assistance Program

Learning & development support

Hybrid and flexible working

Job summary

Macquarie Bank Limited is seeking a Security Engineer to build and deliver machine identity and authentication systems at enterprise scale. You will implement workload identity infrastructure that integrates with cloud platforms, API gateways, and service meshes, while automating identity lifecycles and delivering secure tooling.

The role requires hands-on coding in Python/Go, strong knowledge of IAM across multiple layers, and the ability to mentor engineers to raise the engineering bar within

Qualifications

• Experience building and operating workload identity infrastructure at scale.
• Experience across identity layers: human IAM, application auth (OAuth/OIDC), cloud IAM, and API gateways.
• Production code experience (Python/Go) and debugging distributed auth failures.
• Ability to mentor engineers and influence engineering practices.

Responsibilities

• Build and deliver machine identity and authentication systems at scale.
• Integrate workload identity with cloud platforms, API gateways, and service meshes.
• Develop identity lifecycle automation and secure tooling.
• Lead and review code to raise engineering standards within the squad.

Skills

Machine identity

OAuth/OIDC

Cloud IAM

JWTs

SPIFFE/SPIRE

HashiCorp Vault

Service mesh

Python

Go

Mentorship

Tools

Python

Go

OAuth/OIDC

HashiCorp Vault

SPIFFE/SPIRE

JWTs

Kubernetes

API gateways

Job description

Macquarie Bank Limited is seeking a Security Engineer to build and deliver machine identity and authentication systems at enterprise scale. You will implement workload identity infrastructure that integrates with cloud platforms, API gateways, and service meshes, while automating identity lifecycles and delivering secure tooling.

The role requires hands-on coding in Python/Go, strong knowledge of IAM across multiple layers, and the ability to mentor engineers to raise the engineering bar within