Principal Engineer, DevSecOps

This is a fully remote position, open to applicants in Australia.

📋 Description

• Take ownership of the health, security, and development of OFX’s AWS infrastructure that supports payments, client-facing applications, and internal systems.

• Establish the strategic direction for cloud infrastructure, delivery pipelines, and security protocols across OFX Engineering.

• Create and manage a secure, standardized, and automated paved-road platform utilizing GitHub Actions, along with scanning and policy-as-code.

• Facilitate engineering teams in deploying production-ready services with minimal friction.

• Integrate security, compliance, and reliability into the platform.

• Collaborate with Engineering Directors, engineering managers, principal engineers, tech leads, as well as Security and Technology Operations.

• Design, construct, and maintain secure engineering infrastructure and delivery pipelines.

• Review infrastructure and pipeline modifications proposed by other engineers.

• Provide mentorship to teams on cloud and security best practices.

• Influence the direction of the platform and security roadmap.

• Set an example in code quality, design, and incident management.

• Establish standards for engineering, operational excellence, and security.

• Foster relationships with engineering and security stakeholders.

• Articulate trade-offs to both technical and non-technical audiences.

• Lead initiatives without formal line-management authority.

⛳️ Requirements

• Over 10 years of hands-on experience in designing, building, and managing production AWS workloads in medium to large enterprises.

• Proficient in multi-account setups, VPC networking, IAM, Lambda, ECS/Fargate, RDS, and observability tools.

• More than 10 years of CI/CD experience across application and infrastructure pipelines.

• Familiarity with Jenkins, GitLab CI, Azure DevOps, CircleCI, or TeamCity.

• Extensive experience with GitHub Actions.

• Knowledge of secure credential management in medium to large enterprise settings.

• Software engineering experience in TypeScript, Python, Go, or C#.

• Consistent practice of writing tests, performing code reviews, and adhering to release protocols.

• Experience in cloud security engineering, including least-privilege IAM, RBAC, SSO, MFA, secrets management, and CSPM remediation using tools like Wiz.

• Expertise in integrating SAST, SCA, secrets, container, and IaC scanning, along with policy-as-code into pipelines.

• Experience in automating compliance evidence for ISO 27001, SOC 2, PCI DSS, and the AWS Well-Architected Framework.

• Proven track record in leading incidents and conducting post-incident reviews under real change control.

• Familiarity with event-driven, serverless, or distributed architectures, preferably in SaaS or fintech.

• Strong communication skills, including the ability to draft design documents and explain trade-offs to both technical and non-technical stakeholders.

• Willingness to participate in an on-call rotation and perform occasional out-of-hours maintenance.

• AWS Professional or relevant Security certification.

• Experience in a regulated financial services or payments environment is a plus.

• Contribution to a penetration test remediation or certification cycle is also a plus.

🏝️ Benefits

• A wide array of learning and career development opportunities.

• Leadership training programs.

• Opportunities for secondments and internal mobility.

• Access to an extensive library of online learning resources.

• An annual volunteer day.

• Matched giving initiatives.

• The chance to nominate a charity of choice each quarter.

• Global and regional recognition channels and awards.

• Quarterly and annual awards ceremonies.

• Milestone recognition and acknowledgments.

• Employee-driven wellbeing activities and social events.

• Primary and secondary gender-neutral parental leave (16 weeks) or birthday leave.

• A hybrid work model.

• Emphasis on work-life balance and flexibility.

• An inclusive, diverse, and non-hierarchical workplace culture.

• Support throughout the recruitment and hiring process.