Principal Engineer, DevSecOps

About the role

OFX, a financial operations company headquartered in Sydney, is looking for a Principal Engineer, DevSecOps to act as a senior technical leader within its engineering practice. The role owns the health, security and evolution of the AWS estate powering OFX's payments, client-facing applications and internal systems, and sets the direction for how cloud infrastructure, delivery pipelines and security controls are designed, built and operated.

Key responsibilities

• Build and run a secure, standardised and automated platform (GitHub Actions, scanning and policy-as-code) that lets engineering teams ship production-ready services with minimal friction, with security, compliance and reliability engineered in.
• Work with Engineering Directors, engineering managers, principal engineers, tech leads, the Security team and Technology Operations.
• Review infrastructure and pipeline changes from other engineers and mentor teams on cloud and security practice.
• Help shape the platform and security roadmap, and lead by example in code, design and incident response.

Required profile

• 10+ years of hands-on experience designing, building and operating production AWS workloads in a medium to large enterprise.
• 10+ years of CI/CD experience across application and infrastructure pipelines, with extensive current GitHub Actions experience.
• A genuine software engineering background in at least one general-purpose language (TypeScript, Python, Go or C#).
• Demonstrable cloud security engineering, including least-privilege IAM, RBAC, SSO, MFA, secrets management and CSPM tooling such as Wiz.
• Experience embedding security controls into pipelines (SAST, SCA, container and IaC scanning, policy-as-code) and automating compliance evidence against ISO 27001, SOC 2, PCI DSS and the AWS Well-Architected Framework.
• Track record leading incidents and post-incident reviews under real change control, and experience with event-driven, serverless or distributed architectures, ideally in SaaS or fintech.
• Availability for an on-call rotation and occasional out-of-hours maintenance.

Required skills

• AWS (multi-account, VPC, IAM, Lambda, ECS/Fargate, RDS, observability)
• CI/CD tooling such as Jenkins, GitLab CI, Azure DevOps, CircleCI, TeamCity, with GitHub Actions
• Security certifications: AWS Professional or relevant Security certification; desirable experience in a regulated financial services or payments environment

What we offer

• Hybrid work model with work-life balance and flexibility
• Parental leave (16 weeks) or birthday leave
• Learning and career development, including leadership training, secondments and internal mobility
• Volunteer day, matched giving and employee-led wellbeing events