Senior Engineer - CIAM

Kiwibank; Auckland; Hybrid; NZD 120,000 - 170,000; Full time

Job summary

Kiwibank Auckland-based Digital & Technology Team is seeking a Senior Engineer to design, build, and operate authentication and identity capabilities, keeping customer identities secure while enabling seamless digital banking.

You'll influence architecture, mentor developers, and drive high-quality software delivery through CI/CD in Kubernetes environments, using IAM patterns with OAuth 2.0, OIDC, MFA, and modern security controls, all within an Agile/DevOps culture.

Qualifications

• Proven experience with IAM patterns and practices, including OAuth 2.0, OIDC, and modern MFA methods such as push notifications, SMS OTP, and passkeys
• Strong experience with LDAP and directory backends
• Experienced in Docker, Kubernetes, and service mesh technologies such as Istio
• Proven experience applying CI/CD principles and deployment strategies including Blue Green and canary releases
• Experienced in unit, component, and integration testing, with exposure to TDD and BDD practices
• Strong focus on automation, observability, incident resolution, and performance optimisation
• Proven ability to lead, mentor, and support developers in Agile and DevOps environments
• Experienced in using Copilot and other AI tools to improve engineering practices
• Strong understanding of security fundamentals including PKI, certificates, and secrets management
• Proven ability to make and document architecture decisions while balancing security, reliability, performance, and user experience
• Experienced in Kubernetes distributions is advantageous
• Experienced in banking or other regulated software environments is advantageous

Responsibilities

• Design, build, and operate authentication and identity capabilities
• Contribute to architecture decisions and drive engineering excellence
• Mentor developers and support high-quality software delivery through CI/CD
• Work in Kubernetes-based environments using IAM technologies, including OAuth 2.0 and MFA
• Support modern engineering practices through AI tools and Agile/DevOps methods

Skills

IAM patterns

OAuth 2.0

OIDC

MFA

Docker

Kubernetes

CI/CD

Testing (TDD/BDD)

Automation

Observability

Security fundamentals

Architecture decisions

AI tools (Copilot)

Tools

Docker

Kubernetes

Istio

ForgeRock

Ping Identity

Job description

Exciting Auckland based opportunity at Kiwibank

Join our growing Digital & Technology Team

Banking benefits and flexible working

Ko tātou tēnei - Hei hāpaiake i a koe | This is us. Where you matter.

Join Kiwibank and be part of a team helping make Kiwi better off. This is an opportunity to grow your expertise in identity and access management while contributing to technology that supports millions of customer interactions. You'll work alongside talented engineers, influence technical direction, and strengthen your leadership capability in an environment that values innovation, collaboration, and continuous learning. With flexible working, strong wellbeing support, and opportunities to broaden your experience, you can build a meaningful career while making a real difference for Aotearoa.

Kōtātoutēnei. Hei kaweingā mahi kia tutuki | This is us. Where making an impact matters.

Play a key role in evolving Kiwibank’s Customer Identity and Access Management platform. As a Senior Engineer, you will design, build, and operate authentication and identity capabilities that keep customer identities secure while enabling seamless digital banking experiences. You will contribute to architecture decisions, support engineering excellence, mentor developers, and help drive high quality software delivery through CI/CD practices. Working within Kubernetes based environments, you will leverage IAM technologies, OAuth 2.0, OIDC, MFA solutions, observability tools, automation, testing practices, and security controls to ensure reliable, scalable, and secure platform outcomes. You will also support modern engineering practices through the use of Copilot and AI enabled development tools while contributing to Agile and DevOps ways of working.

Ko tātou tēnei. Kia hāpaii ō pūkenga |This is us. Where your expertise matters.

For this role we’re looking for a collaborative Senior Engineer with strong identity and access management expertise and a passion for secure, modern engineering practices. We would love to hear from you if you have experience in the following:

• Proven experience with IAM patterns and practices, including OAuth 2.0, OIDC, and modern MFA methods such as push notifications, SMS OTP, and passkeys
• Strong experience working with LDAP and directory based backends
• Experienced in Docker, Kubernetes, and service mesh technologies such as Istio
• Proven experience applying CI/CD principles and deployment strategies including Blue Green and canary releases
• Experienced in unit, component, and integration testing, with exposure to TDD and BDD practices
• Strong focus on automation, observability, incident resolution, and performance optimisation
• Proven ability to lead, mentor, and support developers in Agile and DevOps environments
• Experienced in using Copilot and other AI tools to improve engineering practices
• Strong understanding of security fundamentals including PKI, certificates, and secrets management
• Proven ability to make and document architecture decisions while balancing security, reliability, performance, and user experience
• Experienced in ForgeRock, Ping Identity, or similar identity platforms is advantageous
• Experienced in Kubernetes distributions is advantageous
• Experienced in application migration from on premises environments to SaaS solutions is advantageous
• Proficient in JVM based application development is advantageous
• Experienced in banking or other regulated software environments is advantageous
• Experienced in on call and after hours support is advantageous

You do not need to tick every box here to be considered! Above all we’re looking for a technically strong, security minded, and collaborative engineer who enjoys solving complex problems and supporting others to succeed.

Applications close on Sunday 1st November. We will be reviewing resumes throughout the advertising period and reserve the right to withdraw the ad at any time.

Ko tātou tēnei - Hei hāpai i a koe, me tō whānau |This is us. Where you and your whānau matter.

Making a difference for all Kiwi starts with making a difference for our people. Flexibility, growth, challenging and rewarding work - this is Kiwibank. A place where you can belong and thrive - we are as ambitious as we are caring. We have big ideas and big plans. For you, for Kiwibank and for all Kiwi. We are Kiwi making Kiwi better off and that means you too!