Staff Platform Engineer

HR Tech Job; City of Melbourne; On-site; AUD 140,000 - 210,000; Full time

Job summary

Culture Amp is seeking a Staff Engineer to own the engineering and architecture of our Internal Technology platform. The role focuses on workforce identity, SaaS tenancy, and office network controls as software infrastructure.

You will build a secure, automated, self-service ecosystem to reduce operational drag, protect the control plane, and enable leverage for Campers. The role covers identity lifecycle, infrastructure as code, and end-to-end platform ownership in a Melbourne hub environment.

Qualifications

• Strong systems-thinking and architecture skills for enterprise platforms.
• Experience with identity, SaaS tenancy and network controls.
• Expertise in Infrastructure as Code and automation tooling.
• Ability to implement secure, low-friction operator models.

Responsibilities

• Architect, secure and maintain root configuration and identity guardrails.
• Design workforce identity, access management and endpoint controls using IaC.
• Eliminate ClickOps via CI/CD pipelines and disciplined Git workflows.
• Own end-to-end identity lifecycle across joiner/mover/leaver processes.
• Build reusable modules and runbooks for safe provisioning by Workplace Technology.
• Lead baseline office networks architecture across Melbourne and satellites.

Skills

Systems thinking

Architecture design

Identity management

IaC

Terraform

CI/CD

Git workflows

Security mindset

Tools

Okta

Google Workspace

Jamf

Slack

Claude Enterprise

Glean

Job description

How you can help make a better world of work

As a Staff Engineer you will own the engineering and architecture of Culture Amp’s foundational Internal Technology platform, treating workforce identity, core enterprise SaaS tenancy, and office network controls as software infrastructure.

In this role you will build a secure, automated, and self-service ecosystem that reduces operational drag, protects the company’s control plane, and increases leverage for all Campers. You’ll also be accountable for the architectural integrity, and availability of our workforce identity layer, core enterprise platforms, corporate network topology, and infrastructure deployment pipelines.

This is a hands-on engineering role that owns the foundational platform layer, guardrails, and the Infrastructure as Code operating model that underpin our internal tools through GitHub, Terraform, and CI/CD. Routine administration, standard support tasks, and day-to-day operational execution are deliberately delegated to the Workplace Technology team through clear platform boundaries, least-privilege access, and productised run-books.

As part of this team of amazing humans,

You will

• Architect, secure and maintain the root configuration, tenancy guardrails and system integrity of our core enterprise platforms, including Okta, Google Workspace, Jamf, Slack, Claude Enterprise and Glean, with clear boundaries between foundational platform ownership and day-to-day administration.




• Design and continuously improve workforce identity, access management, device trust and endpoint controls using Infrastructure as Code, primarily Terraform, and related automation tooling.




• Eliminate ClickOps by managing platform configuration, identity policies and system state through pull requests, tested CI/CD pipelines and approved scripting patterns, with rigorous Git workflows, branch protections and peer review.




• Own the end-to-end identity lifecycle across joiner, mover and leaver workflows, including HRIS-to-identity integrations, provisioning rules, group structures and downstream access patterns.




• Build and productise reusable modules, administrative tooling, standard operating procedures and runbooks so Workplace Technology can safely manage routine support and provisioning without senior engineering intervention.




• Own the baseline architecture of office networks across our Melbourne hub and satellite locations, while partnering with Security, Enterprise Architecture and Automation to deliver compliant, secure platforms and providing technical leadership across Infrastructure & Identity.

You have

• Strong systems-thinking and architecture skills, with the ability to design resilient identity, SaaS and network architectures as an interconnected enterprise control plane.




• Sound judgment in defining platform boundaries between foundational engineering and delegated Workplace Technology operations.




• A strong anti-ClickOps mindset, instinctively favouring code, automation and reusable modules over manual console changes and actively reducing configuration drift and operational risk.




• The ability to turn complex infrastructure into safe tooling, clear runbooks and least-privilege operating models that help others move quickly without compromising control.




• Collaborative technical leadership skills and a player-coach approach, bridging engineering strategy and practical IT operations across Security, Enterprise Architecture, Automation and Workplace Technology.




• A pragmatic approach to security and risk, balancing strong corporate perimeter controls with a seamless, productive experience for Campers.