Principal Security Engineer
Raviranjan kumarAustraliaSENIORPosted 2h ago
Enterprise Security ArchitectureCloud SecurityAWSGCPApplication SecurityIAMNetwork SecuritySecurity Risk AssessmentsRisk-Based Control DesignDevSecOpsCI/CDTerraformDockerKubernetesThreat ModellingSecurity AutomationAPRA CPS 234APRA CPS 230ISO 27001NIST CSFMicrosoft Entra IDOktaSSOOAuth 2.0PAM
About the Role
We are seeking a Principal Security Engineer to join our team in Melbourne, Australia. This is a contract position with a duration until June 30, 2027, with potential for extension. The role requires 15+ years of experience and focuses on enterprise security architecture, cloud security, and various security technologies.
Key Responsibilities
• Design and implement enterprise security architecture
• Manage cloud security across AWS and GCP environments
• Conduct security risk assessments and design risk-based controls
• Implement DevSecOps practices and CI/CD pipelines
• Perform threat modeling and develop security automation solutions
• Ensure compliance with APRA CPS 234, ISO 27001, and NIST CSF
• Manage identity and access management solutions
Requirements
• 15+ years of experience in security engineering
• Expertise in enterprise security architecture and cloud security
• Strong knowledge of AWS, GCP, and hybrid environments
• Experience with application security, IAM, and network security
• Proficiency in DevSecOps, CI/CD, Terraform, Docker, and Kubernetes
• Understanding of threat modeling and security automation
• Familiarity with APRA CPS 234, ISO 27001, and NIST CSF
• Experience with Microsoft Entra ID, Okta, SSO, OAuth 2.0, and PAM
• Banking or financial services experience is highly desirable
Desirable Certifications
• CISSP, CISM, CCSP, or AWS/GCP Security Certifications