Senior Security Engineer - Cloud Platform

Xero
Auckland, Wellington
Workplace: HybridFull timeFunction: CybersecuritySkills: ["Mentoring","Technical leadership","Collaboration","Problem-solving","Automation-first thinking"]

Design and operate scalable identity and access controls for cloud platforms across AWS, GCP, and Azure. Build secure-by-default guardrails that teams can use to ship quickly without excessive privilege or long-lived credentials. Lead technical design conversations, mentor engineers, and standardize secure access patterns through reusable Terraform modules, policy frameworks, and automation. Collaborate with platform, security, and product teams to close IAM gaps and improve reliability and developer experience.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Xero
Xero
2 days ago

Senior Security Engineer - Cloud Platform

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Design and operate scalable identity and access controls for cloud platforms across AWS, GCP, and Azure. Build secure-by-default guardrails that teams can use to ship quickly without excessive privilege or long-lived credentials. Lead technical design conversations, mentor engineers, and standardize secure access patterns through reusable Terraform modules, policy frameworks, and automation. Collaborate with platform, security, and product teams to close IAM gaps and improve reliability and developer experience.
Location: Auckland, Wellington
Workplace: Hybrid
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Design and operate identity and access controls at scale across AWS, GCP, and Azure.
  • •Build guardrails that enable teams to ship quickly without excessive privilege or long-lived credentials.
  • •Mentor engineers and role-model modern engineering practices while fostering psychological safety.
  • •Collaborate with platform, security, and product teams to integrate secure-by-default controls early in delivery.
  • •Evolve reusable Terraform modules, policy frameworks, and internal tooling to standardise secure access patterns.

Key Requirements

  • •Solid experience securing at least one public cloud environment (AWS, GCP, or Azure), with willingness to learn the others.
  • •Understand Identity and Infrastructure as Code fundamentals.
  • •Designed and maintained reusable Terraform modules and automation that codify IAM controls and policy guardrails at scale.
  • •Strong software engineering foundations, with automation-first thinking, proficiency in scripting (e.g., Python), and modern delivery practices.
  • •Ability to lead technical design conversations and mentor others while improving reliability and delivery quality.
Experience:Cloud securityIdentity and access managementInfrastructure as codeTerraform
Skills:MentoringTechnical leadershipCollaborationProblem-solvingAutomation-first thinking
Tech Stack:AWSGCPAzureIdentity and access managementIAMTerraformPythonWorkload identity federationInfrastructure as code

Company Brief

Xero
Provides cloud-based accounting, payroll, and financial management software for small and medium-sized businesses, enabling invoicing, bank reconciliation, reporting, and integrations with third-party apps globally.
Industry: Enterprise Software
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Wellington, New Zealand
Founded: 2006
WebsiteLinkedIn