Senior Cloud Platform IAM Security Engineer

Xero; Wellington; Hybrid; NZD 120,000 - 160,000; Full time

Job summary

Xero, a leading cloud accounting platform in New Zealand, is seeking a Senior Engineer for the Cloud Platform Access team to design and operate identity and access controls at scale across AWS, GCP, and Azure.

You will mentor engineers, drive automation, and build guardrails that enable teams to ship quickly with secure-by-default practices, balancing security with developer productivity in a hybrid NZ-based role.

Qualifications

• Solid experience securing at least one public cloud environment (AWS, GCP, or Azure).
• Experience designing and maintaining reusable Terraform modules and IAM guardrails at scale.
• Proficiency in scripting (Python or similar) and automation-focused delivery practices.
• Demonstrated ability to mentor engineers and lead technical design discussions.

Responsibilities

• Design and operate identity and access controls across AWS, GCP, and Azure at scale.
• Build reusable Terraform modules and policy guardrails to standardise secure access patterns.
• Lead technical design discussions, mentor teammates, and improve reliability and delivery quality.
• Collaborate with security, platform, and product teams to enable rapid, secure delivery.

Skills

Identity & Access Management

Cloud Security

Terraform Modules

Python scripting

Technical leadership

Tools

Terraform

AWS

GCP

Azure

Job description

Xero, a leading cloud accounting platform in New Zealand, is seeking a Senior Engineer for the Cloud Platform Access team to design and operate identity and access controls at scale across AWS, GCP, and Azure.

You will mentor engineers, drive automation, and build guardrails that enable teams to ship quickly with secure-by-default practices, balancing security with developer productivity in a hybrid NZ-based role.