Principal Security Engineer – Application Identity

About the role

The Principal Security Engineer (Application & Identity) is the senior technical authority for application security and identity architecture across Ubank’s customer‑facing products. Working embedded within product tribes, you will design reusable security patterns and guide squads to make secure defaults the path of least resistance.

Key responsibilities

• Design and build production security patterns, middleware and reference implementations for authentication, service‑to‑service authorisation and third‑party integrations.
• Define binding security architecture decisions and maintain reusable threat models, security building blocks and integration patterns.
• Lead the technical strategy for customer authentication, credential lifecycle and service‑mesh authorisation, ensuring least‑privilege and auditability.
• Coach product squads on threat modelling and security pattern adoption, and curate a living security pattern library.
• Continuously harden the identity landscape through automated validation, privilege reviews and incident response.
• Ensure compliance with APRA CPS 234 by providing technical evidence and architectural artefacts for audits.

Required profile

• 10+ years of hands‑on security engineering experience, with at least 4 years focused on application security or identity architecture.
• Proven track record of delivering production identity systems (customer authentication, service mesh authorisation, certificate lifecycle, API security) at scale.
• Experience in regulated financial services or fintech environments (APRA, FCA, etc.) and complex third‑party integrations.

Required skills

• Identity protocols: OIDC, SAML, FIDO2, passkeys.
• Threat modelling and secure design embedded in delivery squads.
• TLS/mTLS, certificate lifecycle management, API gateway security.
• Zero‑trust and least‑privilege architecture in containerised/cloud‑native environments.
• OAuth federation, service‑mesh authorisation, microservices security.

What we offer

• Innovation with impact – meaningful work and amazing benefits.
• Collaborative, supportive and fun culture.
• Opportunities to build something great with autonomy and trust.
• Hybrid working model for flexibility.
• Clear career development paths to accelerate your growth.