Principal Engineer, DevSecOps

OFX

. Own the health, security and evolution of OFX’s AWS estate supporting payments, client-facing applications and internal systems .

Posted 10/22/2026full-timeRemote • Sydney • AustraliaLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in designing, building, and operating secure AWS infrastructures, with a strong focus on CI/CD practices and cloud security engineering. Proven ability to mentor teams, communicate effectively with diverse stakeholders, and lead incident responses in a regulated financial services environment.

Highest-signal resume keywords

AWS Infrastructure ManagementCI/CD Pipeline DevelopmentCloud Security EngineeringGitHub Actions ExpertiseRegulated Financial Services Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AWSCI/CDTypeScriptPythonGoC#VPC NetworkingIAMLambdaECS/Fargate

Soft Skills

Clear CommunicationMentoringIncident Response Leadership

Tools & Technologies

GitHub ActionsJenkinsGitLab CIAzure DevOpsCircleCITeamCityWizPolicy-as-Code

Certifications & Qualifications

AWS Professional CertificationSecurity Certification

Industry Keywords

PaymentsFintechISO 27001SOC 2PCI DSSAWS Well-Architected Framework

Tech Stack

Tools & technologies

AWSAzureCloudJenkinsPythonTypeScriptGo

About the role

Key responsibilities & impact

Own the health, security and evolution of OFX’s AWS estate supporting payments, client-facing applications and internal systems
Set direction for cloud infrastructure, delivery pipelines and security controls across OFX Engineering
Build and operate a secure, standardised and automated paved-road platform using GitHub Actions, scanning and policy-as-code
Enable engineering teams to ship production-ready services with minimal friction
Engineer security, compliance and reliability into the platform
Work with Engineering Directors, engineering managers, principal engineers, tech leads, Security and Technology Operations
Design, build and maintain secure engineering infrastructure and delivery pipelines
Review infrastructure and pipeline changes from other engineers
Mentor teams on cloud and security practices
Shape the platform and security roadmap
Lead by example in code, design and incident response
Set engineering, operational excellence and security standards
Build relationships with engineering and security stakeholders
Explain trade-offs to technical and non-technical audiences
Lead without formal line-management authority

Requirements

What you’ll need

10+ years hands-on experience designing, building and operating production AWS workloads in a medium to large enterprise
Experience with multi-account setups, VPC networking, IAM, Lambda, ECS/Fargate, RDS and observability tooling
10+ years of CI/CD experience across application and infrastructure pipelines
Experience with Jenkins, GitLab CI, Azure DevOps, CircleCI or TeamCity
Extensive current GitHub Actions experience
Secure credential handling in medium to large enterprise environments
Software engineering background in TypeScript, Python, Go or C#
Habit of writing tests, conducting code reviews and following release discipline
Cloud security engineering experience, including least-privilege IAM, RBAC, SSO, MFA, secrets management and CSPM remediation using tools such as Wiz
Experience embedding SAST, SCA, secrets, container and IaC scanning, and policy-as-code into pipelines
Experience automating compliance evidence for ISO 27001, SOC 2, PCI DSS and AWS Well-Architected Framework
Track record leading incidents and post-incident reviews under real change control
Experience with event-driven, serverless or distributed architectures, ideally in SaaS or fintech
Clear communication skills, including writing design documents and explaining trade-offs to technical and non-technical stakeholders
Availability for an on-call rotation and occasional out-of-hours maintenance
AWS Professional or relevant Security certification
Experience in a regulated financial services or payments environment is desirable
Contribution to a penetration test remediation or certification cycle is desirable

Benefits

Comp & perks

Wide range of learning and career development opportunities
Leadership training
Secondments and internal mobility
Access to a large library of online learning
Annual volunteer day
Matched giving
Opportunity to nominate charity of choice every quarter
Global and regional recognition channels and awards
Quarterly and annual awards
Milestone recognition and shout outs
Employee-led wellbeing activities and social events
Primary and secondary gender-neutral carer parental leave (16 weeks) or birthday leave
Hybrid work model
Work-life balance and flexibility
Inclusive, diverse and non-hierarchical culture
Accommodation during recruitment and hiring process