Staff Engineer | Cyber Security
Posted Updated
Additional office locations
Sydney
Job ID
22326
Date
09-Jun-2026
Permanent - Full time, Senior
Job category
BFS - Security Engineer, Technology - Engineering
- Experience building and operating workload identity infrastructure at scale - provisioning, rotating, and revoking identities for services across distributed systems
- Experience implementing across identity layers: human IAM, application auth (OAuth/OIDC), cloud IAM (AWS/Azure/GCP), and API gateways—making them work together in practice
- Knowledge of when machine identity should replace secrets, when to use attested identities vs tokens, and how to implement federation; you prove your views with working code and production data
- Experience that you ship production code (Python, Go), review architecture, debug distributed auth failures, and mentor engineers; you influence through working systems, not presentations
- Ability to engage with emerging identity patterns, contribute to internal standards, and bring practical improvements into the team's engineering practices
- Understanding of identity protocols, JWTs, and signing well enough to build secure identity systems on top
- Experience in identity lifecycle automation, SPIFFE/SPIRE implementation, HashiCorp Vault operation, service mesh or API gateway auth integration, or open-source contributions in identity projects is highly regarded.
- Experience building and operating workload identity infrastructure at scale - provisioning, rotating, and revoking identities for services across distributed systems
- Experience implementing across identity layers: human IAM, application auth (OAuth/OIDC), cloud IAM (AWS/Azure/GCP), and API gateways—making them work together in practice
- Knowledge of when machine identity should replace secrets, when to use attested identities vs tokens, and how to implement federation; you prove your views with working code and production data
- Experience that you ship production code (Python, Go), review architecture, debug distributed auth failures, and mentor engineers; you influence through working systems, not presentations
- Ability to engage with emerging identity patterns, contribute to internal standards, and bring practical improvements into the team's engineering practices
- Understanding of identity protocols, JWTs, and signing well enough to build secure identity systems on top
- Experience in identity lifecycle automation, SPIFFE/SPIRE implementation, HashiCorp Vault operation, service mesh or API gateway auth integration, or open-source contributions in identity projects is highly regarded.