Jobs / OFX
Principal Engineer, DevSecOps
OFX · Sydney, NSW, Australia
Sydney, NSW, AustraliaExp: 10+ yrsHybrid
Remuneration
Not specified
Location
Sydney, NSW, Australia
Visa sponsorship
Not specified
Job summary
The Principal Engineer, DevSecOps leads the security, reliability, and evolution of production AWS infrastructure supporting payments, client applications, and internal systems. The role sets engineering-wide direction and builds a secure, automated delivery platform using GitHub Actions, security scanning, and policy-as-code, while reviewing infrastructure changes, mentoring teams, shaping the platform roadmap, and leading incident response.
Benefits
16 weeks of primary or secondary gender-neutral carer parental leaveBirthday leaveLearning and career development opportunitiesLeadership trainingSecondments and internal mobilityOnline learning libraryAnnual volunteer dayMatched givingCharity nomination opportunityQuarterly and annual recognition awardsHybrid work flexibility
Qualifications
- At least 10 years designing, building, and operating production AWS workloads in medium-to-large enterprise environments.
- At least 10 years of CI/CD experience across application and infrastructure pipelines, including extensive current GitHub Actions experience.
- Software engineering experience in TypeScript, Python, Go, or C#, with testing, code review, and release discipline.
- Experience with AWS multi-account environments, VPC networking, IAM, Lambda, ECS/Fargate, RDS, and observability tooling.
- Experience embedding security controls in pipelines, including SAST, SCA, secrets, container, and infrastructure-as-code scanning.
- Experience automating compliance evidence for ISO 27001, SOC 2, PCI DSS, or the AWS Well-Architected Framework.
- Experience leading incidents and post-incident reviews under change control.
- Experience with event-driven, serverless, or distributed architectures.
- Clear communication skills for technical and non-technical audiences.
- Availability for on-call rotation and occasional out-of-hours maintenance.
- AWS Professional or relevant security certification.
Responsibilities
- Own the health, security, and evolution of production AWS infrastructure.
- Set direction for cloud infrastructure, delivery pipelines, and security controls.
- Build and operate a secure, standardised, automated engineering platform.
- Review infrastructure and pipeline changes.
- Mentor engineering teams on cloud and security practices.
- Shape the platform and security roadmap.
- Lead by example in code, design, and incident response.
Skills
AWSAzureAzure DevOpsCircleCIC#ECSFargateGitHubGitHub ActionsGitLabGitLab CIGoIAMJenkinsKongAWS LambdaMakePythonTeamCityTypeScriptCloudWatchDockerOpen Policy AgentSecrets ManagerSnykTerraform
Certifications
AWS Professional or relevant security certification
Languages
TypeScriptPythonGoC#
Work schedule
On-call rotationOccasional out-of-hours maintenance
Industry
Financial servicesPaymentsFintech
Relocation
No