Senior Cloud IAM Security Engineer

xero; New Zealand; Hybrid; NZD 140,000 - 180,000; Full time

Job summary

Xero is seeking a Senior Engineer for the Cloud Platform Access team to design and operate IAM controls across AWS, GCP and Azure. You will lead security-first infrastructure, build guardrails, and mentor engineers while enabling teams to ship securely with minimal privilege.

The role sits at the intersection of cloud, security and automation, offering hybrid work with presence in Auckland or Wellington and the chance to influence identity practices across the organisation.

Qualifications

• Experience securing at least one public cloud (AWS, GCP, or Azure).
• Design and maintain reusable Terraform modules and automation for IAM controls.
• Strong software engineering foundations with automation-first mindset.
• Experience mentoring engineers and leading design discussions.

Responsibilities

• Design and operate identity and access controls at scale across AWS, GCP, and Azure.
• Mentor engineers and foster psychological safety.
• Build guardrails to enable secure shipping with minimal privilege.
• Collaborate with security, platform, and product teams to improve IAM posture.

Skills

Identity and access management

Automation

Python

Cloud security

Tools

Terraform

Job description

Xero is seeking a Senior Engineer for the Cloud Platform Access team to design and operate IAM controls across AWS, GCP and Azure. You will lead security-first infrastructure, build guardrails, and mentor engineers while enabling teams to ship securely with minimal privilege.

The role sits at the intersection of cloud, security and automation, offering hybrid work with presence in Auckland or Wellington and the chance to influence identity practices across the organisation.