Mission:

Skip is building the fastest, most intelligent home loan platform in Australia - on infrastructure that has to be both fast to iterate on and genuinely robust in a regulated lending environment. This is our first dedicated platform and security hire. The job is to make sure our platform is secure, reliable, and observable by default - and to build it so that staying that way takes less human effort over time, not more. That includes how code reaches production: the CI/CD pipeline and deployment controls that let engineers and agents ship many times a day without trading off safety.

About the role:

Most "DevOps" job descriptions describe someone who runs infrastructure and fights fires. This role is about building the harness that runs the infrastructure - so security, reliability, provisioning and deployment increasingly enforce themselves.

You will own three surfaces that most companies split across several teams:

- The platform - cloud infrastructure, security posture, and reliability for our core lending systems.

- The fleet - the devices, identity, and corporate IT that every person at Skip depends on to do their best work.

- The delivery pipeline - CI/CD, preview environments and deployment controls that let engineers and agents verify and ship changes many times a day, safely.

The thread connecting them is the same: make the secure, reliable path the automatic path. Least-privilege by default. Provisioning by code. Deployments that verify and gate themselves. Monitoring that tells us before customers do. Devices that configure, secure, and recover themselves. You measure your success not by how much you do, but by how much no longer needs doing.

The opportunity





We are a small, high-talent-density team scaling our business with compute and intelligence. The companies that win this phase keep their teams small and their leverage high - they do not hire linearly with growth. Security and reliability are usually where that breaks: they become a tax that grows with headcount. The opportunity here is to prove the opposite - that a single excellent platform engineer, building the right automation and guardrails, can let posture and reliability improve while the team stays lean. Engineering is changing the same way. With agents writing more of the code, the constraint has moved to verifying and deploying it. This role owns that side: the CI/CD pipeline, preview environments and risk-weighted deployment controls that let engineers and agents verify and ship their own changes safely, so the whole team ships more without growing headcount at the same rate.

Key Responsibilities:

Platform Security

- Drive least-privilege everywhere: tightly scoped IAM roles, secrets management, network segmentation, and a credible answer to "who can touch what, and why."

- Embed security as a design constraint across infrastructure and CI/CD — shift-left, not post-launch audit.

- Establish and own our security posture trajectory:



a credible path toward certification against best in class standards, whilst being fit-for-stage — not gold-plated theatre.

- Lead vulnerability management, dependency and image scanning, penetration testing, and incident response.

- Own our security findings SLA (critical within 1 business day, high within 2): tune our code scanning and penetration testing tools so they produce accurate signal, and monitor adherence.

- Implement zero-trust access: internal tools isolated from the public internet and reachable only by verified staff on managed devices.

- Uplift our AWS posture so a compromised credential can do little harm: scoped roles, short-lived credentials and no long-lived keys.

- Automate security patching for dependencies and container images.

- Monitor for unusual access and behaviour, and run a rehearsed incident response when something happens.

- Run the security calendar (quarterly reviews, secret rotation, DR tests) and keep the evidence current, so audit, funder and regulatory questions can be answered quickly.

Reliability & Business Continuity

- Own the reliability posture of Skip’s core lending platform: uptime targets, incident management, and a blameless post-mortem culture.

- Define and test disaster recovery and business continuity — documented RPO/RTO targets, runbooks for failure at every layer, and regular game-days.

Infrastructure & Developer Experience

- Own infrastructure-as-code and the deployment pipeline; make the path to production rapid, safe, and boring.

- Reduce friction for engineers so they continue to ship multiple times a day — architecture and tooli

📌 Senior Platform Engineer (Sydney)
🏢 Skip Loans
📍 Sydney