About Trideca

Trideca is Australia's trusted strategy, AI, and digital transformation partner, helping some of the nation's largest enterprises (including NAB, Suncorp, Optus, Medibank, and AGL) drive meaningful business impact through technology.

Trideca is Australia's trusted strategy, AI, and digital transformation partner, helping some of the nation's largest enterprises (including NAB, Suncorp, Optus, Medibank, and AGL) drive meaningful business impact through technology. With offices in Melbourne and Sydney and projects spanning multiple industries, we thrive on solving complex challenges, delivering cutting-edge solutions, and pushing the boundaries of what's possible.

Trideca is partnering with a leading Australian enterprise for a Platform Engineer to drive its API security program, reporting to the Head of Technology, Integration Design and Governance. You will author and deploy the security policies that protect the organisation's APIs against external threats, using service mesh to enforce controls aligned to the OWASP API Security Top 10, and you will own the pipelines that apply those policies across the enterprise. This role combines hands‐on security engineering with platform leadership.

Alongside building key infrastructure in AWS, GKE and Kubernetes, you will champion engineering best practice across the team, run brown bag sessions, and drive continuous improvement in the Kubernetes platform, Helm deployment practices and the way policies are applied through GitOps with Argo CD.

What You'll Be Doing

- Author and deploy security policies through the service mesh, with controls aligned to the OWASP API Security Top 10.
- Design and roll out API security policies covering authentication, authorisation and rate limiting,



using metrics, logs and alerts to move from audit to enforcement without breaking consumers.
- Own the pipelines that apply policies across the enterprise, and create key infrastructure in AWS, GKE and Kubernetes.
- Deliver large‐scale Helm changes through GitOps with Argo CD, with safe rollout, rollback and minimal service disruption.
- Set clear standards for identity, traffic and security so every team builds on the same secure defaults.
- Migrate live API traffic onto the enterprise gateway across many teams without downtime.
- Run brown bag sessions and champion engineering best practice across the team.

What You Bring

- Strong API security fundamentals, including the OWASP API Security Top 10.
- Experience writing policy as code, such as OPA/Rego, Kubernetes Network Policies or Istio AuthorizationPolicy.
- A clear understanding of how authentication and authorisation work for both services and users across gateways and service mesh.
- Expert Helm skills in an enterprise environment, including planning and delivering Helm changes at scale.
- Five or more years in a large corporate or enterprise environment, ideally as a Platform Engineer or Staff Engineer, with a track record of building, testing and operating production services.
- Expert Kubernetes (EKS or GKE) and Docker skills,



underpinned by a deep understanding of networking architecture.
- Infrastructure as Code with Terraform, used to provision, manage and optimise cloud platforms at scale.
- Experience building and supporting CI/CD pipelines and DevSecOps practices in a corporate environment.
- Strong development skills in Golang and Python, including building agentic workflows.
- The ability to architect comprehensive cloud solutions to complex business problems, moving comfortably between the detail and the big picture.
- Explicit communication and a collaborative approach, with the confidence to ask questions, explain trade‐offs, work through problems with others and guide Cloud Engineers at all levels.
- A degree in Information Technology, Computer Science or a related field, or equivalent practical experience.

Nice to Have

- Production Istio and Envoy experience in an enterprise environment, including gateways, mTLS and AuthorizationPolicy.
- CKA certification.
- Practical use of AI‐assisted engineering tools, and an interest in modern ways of working that lift automation, code quality and operational efficiency.

Why This Role

- Ownership of an enterprise API security program, from policy design through to the pipelines that enforce it.
- A security brief with real engineering depth, bringing policy as code, service mesh, GitOps and cloud infrastructure together in one role.
- Visible impact, with the controls you design protecting APIs across the enterprise and the standards you set becoming every team's secure defaults.
- A platform leadership role, sharing knowledge through brown bag sessions and mentoring engineers at every level.

Why Choose Trideca?

Empow

📌 DevSecOps Engineer (Melbourne)
🏢 Trideca
📍 Melbourne