Senior AWS Cloud Security Engineer — DevSecOps & IAM

CGR Services; Wellington; On-site; NZD 173,000 - 235,000; Full time

Benefits offered by this job

Permanent, full-time role

Ownership of AWS security

Collaborative engineering environment

Relocation support to Melbourne

Security-focused professional growth

Edge and cloud tech exposure

Job summary

CGR Services is seeking a hands-on Cloud Security Engineer to own AWS security across a complex multi-account cloud. You will work with engineering teams to embed security across the development lifecycle and drive DevSecOps practices.

We value deep AWS security expertise, multi-account management, and a security-as-code mindset. This is a permanent, on-site role with relocation to Melbourne for the right candidate, offering impact in a fast-growing tech environment.

Qualifications

• 5+ years’ experience in Cloud Security, Application Security, or DevSecOps in an engineering environment.
• Hands-on AWS security experience across multi-account environments.
• Strong knowledge of IAM, GuardDuty, Security Hub, WAF, Cognito and AWS Organizations.
• Experience securing CI/CD pipelines with SAST/DAST tooling.
• IaC using CloudFormation or AWS SAM; security as code.
• Proficiency with CI/CD tools (GitHub Actions, GitLab CI).
• Familiarity with threat modelling, security assessments, and compliance frameworks.
• AWS IoT Core experience is a plus; certifications like AWS Security Specialty welcomed.

Responsibilities

• Own and mature AWS security across a multi-account environment.
• Design and implement guardrails, policies and compliance controls.
• Manage AWS security services and incident response processes.
• Embed security into the software development lifecycle and pipelines.
• Collaborate with engineering teams on secure code reviews and remediation.
• Shape security architecture and engineering standards.
• Drive DevSecOps practices and security awareness across teams.

Skills

AWS security

DevSecOps

Application security

IAM / Identity Center

SAST/DAST tooling

CI/CD pipelines

IaC (CloudFormation/AWS SAM)

Python/Go/Rust

VPC networking

Security monitoring

Tools

IAM

GuardDuty

Security Hub

WAF

Cognito

Inspector

CloudFormation

AWS SAM

Job description

CGR Services is seeking a hands-on Cloud Security Engineer to own AWS security across a complex multi-account cloud. You will work with engineering teams to embed security across the development lifecycle and drive DevSecOps practices.

We value deep AWS security expertise, multi-account management, and a security-as-code mindset. This is a permanent, on-site role with relocation to Melbourne for the right candidate, offering impact in a fast-growing tech environment.