Address
Form of work- We're changing the game!
- We're doing big things, and we can't do it alone.
- We're part of a big ecosystem, and we know teamwork and passion for our purpose is what will make us successful.
AP+ bring together Australia’s three domestic payment organisations into one integrated entity. Operating in the public interest, AP+ focuses on meeting the needs of all payment users and representing the views of a diverse range of stakeholders. BPAY Group, eftpos and NPP Australia continue to operate as distinct brands within a Group Leadership Team structure.
AP+ is intended to create a more efficient and agile payments group, building the competitiveness of Australian domestic payments infrastructure, and delivering significant benefits to Australian consumers and businesses.
As the Senior Cloud and DevSecOps Engineer you will be responsible for:
- Maintaining and building secure cloud-based environments using IaC (Terraform, Helm, CloudFormation etc)
- Evolving the platform’s security posture in line with industry best practices and based on a risk based approach to cloud security practices.
- Challenging current threat response and vulnerability management practices and proposing improvements.
- Proactively collaborating with the security team to understand our security posture and maintain a continuous feedback loop.
- Addressing identified security vulnerabilities in a proactive and timely manner.
- Leverage different security tools to run security assessments and audits to ensure cloud infrastructure’s compliance with industry standards.
- Integrate security tools and practices into CI/CD pipelines.
- Collaborate with development teams to ensure secure coding practices.
- Implement and maintain security protocols and practices across all cloud services and applications.
- Contribute towards our commitment to shifting left as DevSecOps team.
- Identify technology improvement and transformation opportunities to enhance customer service, reduce operating costs, and maximize the speed of implementation.
- Contribute to BAU activities as DevSecOps engineer.
- Building great things, but together.
- Available to work in a rotating support on-call roster outside of business hours and weekends.
- Available to occasionally work on planned maintenance and other activities outside business-hours and weekends.
In order for you to be successful in the role, you'll have met most of the following requirements:
- Experienced with implementing and adhering to security operational practices.
- Held a Cyber Security analyst or similar role before.
- Certified Cloud Security Professional (CCSP) or similar Cyber Security certifications.
- Some experience with or exposure to configuration management tools such as Terraform (for AWS) and AWS CDK.
- Familiarity with different software architectures, specially microservices and serverless.
- Understanding of containers and containers’ orchestration.
- Cloud networking such as VPC, NACL ,WAF, load balancers etc
- Implementation & maintenance of security practices for CI/CD pipelines.
- Working in an environment that is Agile and test-driven
We know applying for a role can be a nerve-wracking experience, so we endeavor to review applications and plan to schedule screening interviews within the next two weeks. If you are among selected candidates, we’ll be in touch to schedule a phone interview. In any case, we will keep you posted on the status of your application.
We want to remove all barriers to inclusion so if you need advice or support with your application, we’re here to help. Please reach out to recruitment@auspayplus.com.au. We also encourage you to let us know your pronouns at any point during the recruitment process.
*AP+ are not working with Recruitment Agencies for this role.
