Senior Cloud IAM Security Engineer - Platform & Automation

Xero; Wellington, Auckland; Hybrid; NZD 140,000 - 200,000; Full time

Job summary

Xero in New Zealand is seeking a Senior Engineer for the Cloud Platform Access team to design and operate identity and access controls at scale across AWS, GCP, and Azure. This is high-leverage platform security work with a product mindset.

You will mentor engineers, foster psychological safety, and work across security, platform and product teams to embed secure-by-default controls early in delivery. Hybrid work in Auckland or Wellington with flexible home days.

Qualifications

• Experience securing at least one public cloud (AWS/GCP/Azure) and willingness to learn others
• Designed and maintained reusable Terraform modules and IAM automation
• Strong software engineering foundations with automation-first mindset; Python preferred
• Led technical design discussions and mentored others; raised delivery standards
• Collaborative approach across security, platform and product teams to enable secure delivery
• Curious about AI applications to accelerate engineering workflows

Responsibilities

• Design and operate identity and access controls at scale across AWS, GCP, and Azure
• Mentor engineers, foster psychological safety, and model modern engineering practices
• Collaborate with security, platform, and product teams to embed secure-by-default controls early in delivery
• Develop guardrails that enable rapid yet secure shipping with minimal privilege

Skills

Cloud security

Mentoring

Security by default

DevOps automation

Tools

Terraform

Python

IAM automation

Job description

Xero in New Zealand is seeking a Senior Engineer for the Cloud Platform Access team to design and operate identity and access controls at scale across AWS, GCP, and Azure. This is high-leverage platform security work with a product mindset.

You will mentor engineers, foster psychological safety, and work across security, platform and product teams to embed secure-by-default controls early in delivery. Hybrid work in Auckland or Wellington with flexible home days.