Senior Cloud Platform IAM Security Engineer – Hybrid NZ

Xero; New Zealand; Hybrid; NZD 150,000 - 190,000; Full time

Job summary

Xero in New Zealand is seeking a Senior Security Engineer for the Cloud Platform to design and operate identity and access controls across AWS, GCP, and Azure. You will treat secure access as a product, building guardrails that enable teams to ship quickly with minimal privilege.

You will mentor engineers, collaborate with security, platform, and product teams, and evolve Terraform modules and internal tooling to standardise secure access patterns.

Qualifications

• Experience securing at least one public cloud: AWS, GCP, or Azure.
• Designed and maintained reusable Terraform modules and automation for IAM controls.
• Proficient in Python or another scripting language; automation-first mindset.
• Strong collaboration across security, platform, and product teams.

Responsibilities

• Design and operate identity and access controls at scale across cloud platforms.
• Mentor engineers and promote engineering excellence.
• Collaborate with security, platform, and product teams to embed secure-by-default controls.
• Develop reusable Terraform modules and internal tooling for secure access patterns.
• Lead design discussions and help raise delivery quality.

Skills

Cloud security

IAM / access management

Terraform automation

Python scripting

Mentoring

Tools

Terraform

Python

Job description

Xero in New Zealand is seeking a Senior Security Engineer for the Cloud Platform to design and operate identity and access controls across AWS, GCP, and Azure. You will treat secure access as a product, building guardrails that enable teams to ship quickly with minimal privilege.

You will mentor engineers, collaborate with security, platform, and product teams, and evolve Terraform modules and internal tooling to standardise secure access patterns.