Senior Cloud Platform Security Engineer (IAM & Access)

Xero; Auckland; Hybrid; NZD 120,000 - 180,000; Full time

Job summary

Xero is seeking a Senior Engineer for the Cloud Platform Access team to design and operate identity and access controls at scale across AWS, GCP, and Azure. You will shape secure access as a product and lead hands‑on engineering initiatives.

You will mentor teammates, foster psychological safety, and contribute to reusable automation and Terraform‑based tooling. The role sits at the intersection of cloud infrastructure, security, and developer experience, with hybrid work from Auckland or

Qualifications

• Experience securing at least one public cloud (AWS, GCP, or Azure) with willingness to learn others.
• Designed and maintained reusable Terraform modules and automation codifying IAM controls.
• Strong software engineering foundations; automation-first mindset; proficient in Python or similar scripting language.
• Ability to lead technical design discussions, mentor others, and raise standards across teams.

Responsibilities

• Design and operate identity and access controls at scale across cloud environments (AWS, GCP, Azure).
• Mentor engineers, foster psychological safety, and drive secure-by-default patterns across teams.

Skills

Cloud security

IaC fundamentals

Terraform

Python scripting

Technical leadership

Automation-first

Collaboration

AI in engineering

Tools

Terraform

Python

Job description

Xero is seeking a Senior Engineer for the Cloud Platform Access team to design and operate identity and access controls at scale across AWS, GCP, and Azure. You will shape secure access as a product and lead hands‑on engineering initiatives.

You will mentor teammates, foster psychological safety, and contribute to reusable automation and Terraform‑based tooling. The role sits at the intersection of cloud infrastructure, security, and developer experience, with hybrid work from Auckland or