Staff Engineer: Zero-Trust Workload Identity Architect

Macquarie Group; Sydney; Híbrido; AUD 120.000 - 150.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Wellbeing leave days

Paid parental leave

Volunteer leave

Learning and development opportunities

Reimbursement for work from home equipment

Descripción de la vacante

Macquarie Group in Sydney seeks a professional to build and deliver machine identity systems. You will solve complex problems, enabling secure authentication across services and workload identity integration.

The ideal candidate has experience in workload identity infrastructure and coding in Python or Go, along with strong knowledge of cloud IAM and API gateways. Macquarie offers a hybrid work model and comprehensive benefits.

Formación

• Experience in building and operating workload identity infrastructure.
• Strong understanding of identity protocols, JWTs, and signing.
• Ability to engage with emerging identity patterns and contribute to standards.

Responsabilidades

• Build and deliver machine identity and authentication systems.
• Implement workload identity infrastructure that integrates with cloud platforms.
• Deliver authentication solutions that span multiple identity layers.

Conocimientos

Workload identity infrastructure

Human IAM

API gateways

Production code (Python, Go)

Debugging distributed auth failures

Identity lifecycle automation

Identity protocols and JWTs

Herramientas

HashiCorp Vault

SPIFFE/SPIRE

Descripción del empleo

Our team enables secure service-to-service authentication at enterprise scale. We architect machine identity systems and authentication integration layers across Macquarie, ensuring every service, API, and workload across 31 markets can authenticate securely without human intervention. We design how workload identity integrates with human IAM, cloud platforms, and API gateways to create unified zero-trust architecture.

We are a global financial services group operating in 30 markets with 57 years of unbroken profitability. At Macquarie, you’re empowered to shape a career that is fulfilling and creates value. You will bring your insights and expertise to the task at hand and feel supported as you make your own kind of impact for a better future.

What role will you play?

You will build and deliver machine identity and authentication systems at Macquarie through hands-on engineering and technical leadership within your squad. You will solve hard problems, implementing workload identity infrastructure that integrates with cloud platforms, API gateways, and service meshes; building identity lifecycle automation that works at scale; delivering authentication solutions that span multiple identity layers. You will write production code, build tooling backed by working prototypes, own technical decisions within your domain, and raise the engineering bar through code review and mentorship.

What You Offer

• Experience building and operating workload identity infrastructure at scale - provisioning, rotating, and revoking identities for services across distributed systems
• Experience implementing across identity layers: human IAM, application auth (OAuth/OIDC), cloud IAM (AWS/Azure/GCP), and API gateways—making them work together in practice
• Knowledge of when machine identity should replace secrets, when to use attested identities vs tokens, and how to implement federation; you prove your views with working code and production data
• Experience that you ship production code (Python, Go), review architecture, debug distributed auth failures, and mentor engineers; you influence through working systems, not presentations
• Ability to engage with emerging identity patterns, contribute to internal standards, and bring practical improvements into the team's engineering practices
• Understanding of identity protocols, JWTs, and signing well enough to build secure identity systems on top
• Experience in identity lifecycle automation, SPIFFE/SPIRE implementation, HashiCorp Vault operation, service mesh or API gateway auth integration, or open-source contributions in identity projects is highly regarded.
  
  

We love hearing from anyone inspired to build a better future with us, if you're excited about the role or working at Macquarie we encourage you to apply.

What We Offer

Benefits

At Macquarie, you’re empowered to shape a career that’s rewarding in all the ways that matter most to you. Macquarie employees can access a wide range of benefits which, depending on employment type, include:

• 1 wellbeing leave day per year
• Up to 5 additional service bonus leave days per year
• Up to 20 weeks’ paid parental leave for primary caregivers along with 12 days of transition leave upon return to work, and 6 weeks’ paid leave for non-primary caregivers
• 2 days of paid volunteer leave and donation matching
• Up to 12 months’ gender affirmation leave, including 6 weeks’ paid leave
• Access to Employee Assistance Program and wellbeing benefits including skin and health checks, and flu vaccinations
• Access to a wide range of salary packaging options
• Access to a wide range of learning and development opportunities, including reimbursement for professional membership or subscription
• Hybrid and flexible working arrangements, dependent on role
• Reimbursement for work from home equipment
  
  

About Technology

Technology enables every aspect of Macquarie, for our people, our customers and our communities. We’re a global team that is passionate about accelerating the digital enterprise, connecting people and data, building platforms and applications and designing tomorrow’s technology solutions.

Inclusion at Macquarie

We are committed to providing an inclusive environment for all, where different experiences, skills and perspectives are valued and respected. Macquarie provides access to opportunities for all individuals regardless of race, colour, religion, sex, sexual orientation, national origin, age, disability, protected veteran status, genetic information, marital status, gender identity or any other characteristic or circumstance.

We provide reasonable adjustments to individuals who may need support during the recruitment process and employment. If you require an adjustment, please let us know during the application process.