Senior Security Engineer, Platform Engineering
Firmus Technologies1 day ago
Sydney, AustraliaSenior
Responsibilities
- Lead platform security efforts by assessing risks, hardening cloud and on-premises platforms, and ensuring secure access.
- Own the security standard for the Firmus Managed Kubernetes Service supporting high-performance computing customers.
- Apply Kubernetes security practices covering RBAC, admission controllers, pod security, auditing, and network policies.
- Implement Kubernetes supply chain security through image signing, vulnerability scanning, and policy enforcement.
- Secure infrastructure-as-code pipelines with automated security scanning and automate patch management for platform components.
- Improve compliance checks, secrets management, identity and privileged access management, encryption, security monitoring, incident response, and security awareness.
- Experiment with AI/ML-powered tools to identify security posture changes and proactively address drift or anomalies.
Requirements
- Bachelor's degree in computer science or a related technical field.
- 7+ years of experience as a Platform Security, DevSecOps, or Site Reliability Engineer.
- Strong knowledge of CIS Benchmarks, NIST, ISO 27001, SOC 2, and OWASP Top 10 risks.
- Proficiency in Kubernetes security and networking, including tools such as Calico, kube-bench, and Falco.
- Experience with Kubernetes supply chain security tools such as Cosign, Trivy, and Kyverno.
- Experience with IaC security scanning tools such as Checkov and Snyk.
- Experience with secrets management using HashiCorp Vault or Azure Key Vault.
- Experience with identity and privileged access management tools such as Auth0, Microsoft Entra, HashiCorp Boundary, or Teleport.
- Experience with SSL/TLS certificate issuance, renewal, deployment, and monitoring.
- Competent scripting and programming skills in Bash, Python, or Go, plus knowledge of Linux internals, networking stacks, and distributed storage.
- Clear and effective written and spoken English communication.
- Security certifications such as CISSP, CKS, OSCP, or GCP/AWS/Azure Security are valued.
- Experience in high-growth startups or regulated industries, strong security and data privacy requirements, or AI/ML Ops environments is a bonus.
Benefits
- Full-time employment based in Sydney, Australia.
- Opportunity to work on sustainable AI infrastructure and large-scale GPU cloud platforms.
Tech Stack
Categories