Principal Security Engineer
Satyam KumarAustraliaSENIORPosted 2h ago
Enterprise Security ArchitectureCloud SecurityAWSGCPApplication SecurityIAMNetwork SecuritySecurity Risk AssessmentsRisk-Based Control DesignDevSecOpsCI/CDTerraformDockerKubernetesThreat ModellingSecurity AutomationAPRA CPS 234APRA CPS 230ISO 27001NIST CSFMicrosoft Entra IDOktaSSOOAuth 2.0PAM
About the Role
We are seeking a Principal Security Engineer to join our team in Melbourne, Australia. This is a contract position with a duration until June 30, 2027, with potential for extension. The role requires 15+ years of experience and focuses on enterprise security architecture, cloud security, and various security technologies.
Key Responsibilities
• Design and implement enterprise security architecture and cloud security solutions
• Manage application security, IAM, and network security
• Conduct security risk assessments and design risk-based controls
• Implement DevSecOps practices and CI/CD pipelines
• Perform threat modeling and security automation
• Ensure compliance with APRA CPS 234, CPS 230, ISO 27001, and NIST CSF
• Utilize Microsoft Entra ID, Okta, SSO, OAuth 2.0, and PAM
Requirements
• 15+ years of experience in security engineering
• Expertise in AWS and GCP cloud security
• Strong background in application security, IAM, and network security
• Experience with DevSecOps, CI/CD, Terraform, Docker, and Kubernetes
• Knowledge of threat modeling and security automation
• Familiarity with APRA CPS 234, CPS 230, ISO 27001, and NIST CSF
• Experience with Microsoft Entra ID, Okta, SSO, OAuth 2.0, and PAM
• Banking or financial services experience is highly desirable
Desirable Certifications
• CISSP, CISM, CCSP, or AWS/GCP Security Certifications