Site Reliability Engineer

ASB Bank; Auckland; On-site; NZD 120,000 - 180,000; Full time

Benefits offered by this job

Banking benefits

Personal & career development

Flexible working styles

Parental benefits

Job summary

ASB Bank is seeking a Site Reliability Engineer (Software Specialist) to join the identity and integrations platform. You will help manage workforce identity, access management, and workload identities, while automating deployments and strengthening security across services.

The role emphasizes collaboration in agile teams, practical expertise in IaC, CI/CD, and security best practices, with a focus on OAuth, SSO, MFA and least privileged access.

Qualifications

• Experience with Infrastructure as Code concepts and tools such as Terraform or BICEP.
• Experience with CI/CD pipelines, preferably Azure DevOps or GitHub.
• Proficiency with version control systems (Git).
• Ability to operate within Agile and DevSecOps methodologies.
• Practical networking/virtual networking implementation and troubleshooting.
• Expertise in Cyber and Application Security, SSO, MFA, and least privilege principles.
• Strong written and verbal communication, able to tailor technical detail for the audience.
• Collaborative, cross-functional teamwork with ownership of delivery.
• Preferred certifications: CyberArk Idira PAM-DEF, Azure certs, AZ-104, SC300, AZ400, AZ-500, AZ700.

Responsibilities

• Manage identity and access lifecycle for workforce and workload identities.
• Configure and maintain identity security systems and access controls.
• Lead integration work related to OAuth.
• Design, implement and maintain CI/CD pipelines and IaC (Terraform, BICEP).
• Perform security remediation and create SOPs, dashboards and reports.
• Contribute to automation of workflows and resource deployments.

Skills

Terraform

BICEP

Azure DevOps

GitHub

Git

Agile

DevSecOps

Networking

Cybersecurity

Single-Sign-On

MFA

Least Privilege

CyberArk

Idira Certification

Azure Certifications

AZ-104

SC300

AZ400

AZ-500

AZ700

Communication Skills

Tools

Terraform

BICEP

Azure DevOps

GitHub

Git

CyberArk

Job description

At ASB, we are more than a bank. We are a purpose-led organisation that helps people, communities, and our environment thrive together. Our values of Courage, Care, and Curiosity guide us to challenge the status quo, genuinely care for those we work with and serve, and always look for new ways to improve.

If you've always wanted to apply your skills to a large-scale Kiwi success story, then this is for you - as we are on the lookout for a Site Reliability Engineer (Software Specialist) to join our identity and integrations platform.

About us:

You'll be part of a team on the forefront of working to deliver and support a secure, functional and performant ecosystem to our customers. In our diverse and accepting environment, our people grow their agile mind-set, learn, evolve, and utilise their skills, while being empowered to make decisions.

You'll have the opportunity to get hands-on with some interesting and complex pieces of work on an enterprise scale, all while being part of a smaller squad that makes their own decisions about how to work through prioritisation - so your voice will be heard, and your opinions valued.

Being a member of the Site reliability engineering Chapter involves looking after both project deliveries and the day-to-day operational capabilities within the squads and investing in several fundamental services that underpin the technology stack at ASB, as well as to automate workflows and resource deployments where it adds value. We are looking for a mix of technical skills to support the following activities in Identity Security.

• Manage the lifecycle of workforce identity and access management, and workload identities, ensuring seamless user access to various services.
• Apply expertise in Identity Security Systems - manage and control access to services and resources by verifying access requirements, authentication methodologies, while implementing and managing permissions, entitlements and the principle of least privilege
• Configure and maintain Microsoft Active Directory, Entra, DNS (internal) and CyberArk Privileged Access Management configuration.
• Lead and support integration work related to OAuth.
• Design, Implement and maintain automated pipelines and Terraform-based infrastructure as a code.
• Perform security remediation and detection processes, develop documentation - SOP & Knowledgebase, dashboards and reporting.

About you:

We advocate agile, fully cross functional teams. We are looking for a mix of technical skills, including:

• Exposure to or understanding key concepts with Infrastructure as Code (one or all the following: Terraform; BICEP), CI/CD pipelines (especially Azure DevOps or GitHub), version control systems (Git).
• Able to drive and work within Agile and DevSecOps methodologies.
• Practical experience with networking/virtual networking implementation and troubleshooting.
• Expertise in Cyber and Application Security, Single-Sign-On, MFA and the principle of least privilege.
• Excellent written and verbal communication skills - can balance the level of technical detail for the right audience and can clearly articulate problem statements.
• Agility and work collaboratively within a cross functional team and individually taking ownership of workstream delivery and contribute towards business impact.
• CyberArk/Idira Certification PAM-DEF, Azure certification, AZ-104, SC300, AZ400, AZ-500 and AZ700 are preferred.

What's in it for you:

• We offer great banking benefits, heaps of personal and career development opportunities, flexible working styles, and parental benefits.

Please note for advertising purposes we have use the title Site Reliability Engineer. The internal ASB title is SRE - Software Specialist

To serve a diverse community, we need a diverse organisation. We encourage applicants from allbackgrounds who bring unique perspectives and thinking styles that add to the culture andperformance of our team.