Senior Cloud Security Engineer (Azure & AppSec)

Rush; Auckland; Hybrid; NZD 150,000 - 210,000; Full time

Job summary

Rush is seeking a senior security-focused engineer to design, implement and secure end-to-end platforms on Microsoft Azure for a major New Zealand client. You’ll own security design decisions, from design through production, including authentication, authorisation flows, and infrastructure hardening.

You’ll integrate security into CI/CD, build robust audit trails and telemetry, and drive secure coding practices across the delivery team. Strong Azure and cloud security expertise are essential.

Qualifications

• 5+ years in software, platform or security engineering with at least 2 focused on security, shipping production code in a team.
• Track record of owning security design and implementation.
• Strong coding in at least one mainstream language (e.g. C#, TypeScript, Python).
• Infrastructure as code on Microsoft Azure (Bicep or Terraform).
• Deep hands-on Azure: networking, Entra ID, Key Vault, WAF, Front Door and Defender for Cloud.

Responsibilities

• Own security design decisions on engagements, approving security-relevant architecture before it’s built.
• Lead threat modelling at design and sprint planning using OWASP and NIST SSDF.
• Write security stories and acceptance criteria into the backlog, ensuring security ships in every sprint.
• Review security-sensitive code, pair with developers on fixes, and lift the team’s security capability.
• Act as security technical lead for client engineering teams.

Skills

Security engineering

Software engineering

Azure expertise

CI/CD pipelines

OAuth 2.0 / OpenID

Threat modelling

RBAC

Scripting

OWASP knowledge

KQL

Tools

Azure DevOps

Terraform

Bicep

Azure Key Vault

WAF / Front Door

Azure Monitor

Job description

Rush is seeking a senior security-focused engineer to design, implement and secure end-to-end platforms on Microsoft Azure for a major New Zealand client. You’ll own security design decisions, from design through production, including authentication, authorisation flows, and infrastructure hardening.

You’ll integrate security into CI/CD, build robust audit trails and telemetry, and drive secure coding practices across the delivery team. Strong Azure and cloud security expertise are essential.