Senior Engineer - CIAM

Kiwibank; Auckland; Hybrid; NZD 150,000 - 190,000; Full time

Benefits offered by this job

Flexible working

Wellbeing support

Banking benefits

Job summary

Kiwibank is seeking a collaborative Senior Engineer to evolve its Customer Identity and Access Management platform. You will design, build, and operate authentication capabilities supporting secure digital banking experiences while mentoring developers and contributing to architecture decisions.

You will work in Kubernetes-based environments, apply CI/CD practices, and leverage IAM technologies with a strong focus on security, observability, and automation.

Qualifications

• Experience with IAM patterns and modern auth methods.
• Hands-on with LDAP or directory backends.
• CI/CD and deployment strategies like blue/green/canary.
• Experience with testing (unit/integration) and TDD/BDD is a plus.
• Automation, observability, incident resolution, and performance focus.
• Ability to lead, mentor, and work in Agile/DevOps environments.
• Familiarity with AI tools (Copilot) is a bonus.
• Security fundamentals including PKI, certificates, and secrets management.
• Architectural decision making balancing security, reliability, and UX.
• Experience with ForgeRock or Ping Identity is advantageous.
• Kubernetes distributions and on-prem to SaaS migrations are advantageous.
• JVM-based development, banking/regulatory context are advantageous.
• On-call and after-hours support experience is advantageous.

Responsibilities

• Design, build, and operate authentication and identity capabilities for secure, seamless digital banking experiences.
• Contribute to architecture decisions, mentor developers, and drive high-quality software delivery via CI/CD.
• Work in Kubernetes-based environments leveraging IAM tech, OAuth2, OIDC, MFA; emphasize observability, automation, and testing.
• Support modern engineering practices using Copilot and AI tools within Agile/DevOps workflows.

Skills

IAM patterns

OAuth 2.0

OIDC

MFA

Push notifications

SMS OTP

Passkeys

LDAP

CI/CD

Blue/Green

Canary releases

Unit testing

Integration testing

Automation

Observability

Incident resolution

Performance tuning

Leadership

Mentoring

Agile

DevOps

Copilot

AI tools

PKI

Certificates

Secrets management

Architecture decisions

Identity platforms

Kubernetes distributions

On-prem to SaaS

JVM

Banking domain

On-call support

Tools

Docker

Kubernetes

Istio

Job description

• Exciting Auckland based opportunity at Kiwibank
• Join our growing Digital & Technology Team
• Banking benefits and flexible working
  

Ko tātou tēnei - Hei hāpai ake i a koe | This is us. Where you matter.

Join Kiwibank and be part of a team helping make Kiwi better off. This is an opportunity to grow your expertise in identity and access management while contributing to technology that supports millions of customer interactions. You'll work alongside talented engineers, influence technical direction, and strengthen your leadership capability in an environment that values innovation, collaboration, and continuous learning. With flexible working, strong wellbeing support, and opportunities to broaden your experience, you can build a meaningful career while making a real difference for Aotearoa.

Kō tātou tēnei. Hei kawe i ngā mahi kia tutuki | This is us. Where making an impact matters.

Play a key role in evolving Kiwibank’s Customer Identity and Access Management platform. As a Senior Engineer, you will design, build, and operate authentication and identity capabilities that keep customer identities secure while enabling seamless digital banking experiences. You will contribute to architecture decisions, support engineering excellence, mentor developers, and help drive high quality software delivery through CI/CD practices. Working within Kubernetes based environments, you will leverage IAM technologies, OAuth 2.0, OIDC, MFA solutions, observability tools, automation, testing practices, and security controls to ensure reliable, scalable, and secure platform outcomes. You will also support modern engineering practices through the use of Copilot and AI enabled development tools while contributing to Agile and DevOps ways of working.

Ko tātou tēnei. Kia hāpai i ō pūkenga |This is us. Where your expertise matters.

For this role we’re looking for a collaborative Senior Engineer with strong identity and access management expertise and a passion for secure, modern engineering practices. We would love to hear from you if you have experience in the following:

• Proven experience with IAM patterns and practices, including OAuth 2.0, OIDC, and modern MFA methods such as push notifications, SMS OTP, and passkeys
• Strong experience working with LDAP and directory based backends
• Experienced in Docker, Kubernetes, and service mesh technologies such as Istio
• Proven experience applying CI/CD principles and deployment strategies including Blue Green and canary releases
• Experienced in unit, component, and integration testing, with exposure to TDD and BDD practices
• Strong focus on automation, observability, incident resolution, and performance optimisation
• Proven ability to lead, mentor, and support developers in Agile and DevOps environments
• Experienced in using Copilot and other AI tools to improve engineering practices
• Strong understanding of security fundamentals including PKI, certificates, and secrets management
• Proven ability to make and document architecture decisions while balancing security, reliability, performance, and user experience
• Experienced in ForgeRock, Ping Identity, or similar identity platforms is advantageous
• Experienced in Kubernetes distributions is advantageous
• Experienced in application migration from on premises environments to SaaS solutions is advantageous
• Proficient in JVM based application development is advantageous
• Experienced in banking or other regulated software environments is advantageous
• Experienced in on call and after hours support is advantageous

You do not need to tick every box here to be considered! Above all we’re looking for a technically strong, security minded, and collaborative engineer who enjoys solving complex problems and supporting others to succeed.

Applications close on Sunday 1st November. We will be reviewing resumes throughout the advertising period and reserve the right to withdraw the ad at any time.

Ko tātou tēnei - Hei hāpai i a koe, me tō whānau |This is us. Where you and your whānau matter.

Making a difference for all Kiwi starts with making a difference for our people. Flexibility, growth, challenging and rewarding work - this is Kiwibank. A place where you can belong and thrive – we are as ambitious as we are caring. We have big ideas and big plans. For you, for Kiwibank and for all Kiwi. We are Kiwi making Kiwi better off and that means you too!