We're partnering with a leading consultancy that is engaged on a significant security transformation programme with a tier 1 Australian insurer. They're looking for a Cloud Security Engineer who can operate at the intersection of platform engineering and security. They are looking for someone who builds the guardrails that let development teams move rapid without cutting corners.
This isn't a purely advisory role. You'll be hands‑on, shaping security architecture, embedding controls into CI/CD pipelines, and contributing to an Internal Developer Platform that sets the standard for how engineering teams work securely at scale. In a regulated environment with real stakes, your work will matter.
What you'll bring
You'll have strong AWS security architecture experience across IAM, VPC, CloudTrail, and Config, and you'll be comfortable owning Infrastructure-as-Code via Terraform rather than just reading it. Hands‑on experience with CI/CD tooling (GitHub Actions, Jenkins, or similar), SAST/SCA and container security tools, and secrets management platforms is expected.
A working knowledge of policy-as-code — OPA/Rego preferred — and cloud-native security patterns across containers and Kubernetes rounds out the technical picture.
On the domain side, you'll understand DevSecOps and secure SDLC as embedded practice rather than an afterthought, and you'll be fluent in the AWS Well-Architected Framework security pillar, as well as IAM, RBAC, and federation.
Mandatory experience
Proven experience building or contributing to an Internal Developer Platform or platform engineering setting is essential, as is exposure to security control automation and compliance tooling at scale. These are non-negotiable for this engagement.
Preferred
Familiarity with enterprise security integration — SIEM, identity platforms, observability tooling is a plus, as is knowledge of APRA CPS 230/234 or comparable regulatory frameworks.
Interested?
We're moving quickly. If your background maps to the above, get in touch with a CV and a brief note on your AWS security experience. Even if the timing isn't quite right, a conversation now is better than missing each other later.
J-18808-Ljbffr