Senior Software Engineer, Infra (Cloud Security Platform)

About the role

Airwallex is hiring a Senior Software Engineer within its Cloud Platform Engineering team, which builds the infrastructure systems giving the organisation visibility and control over its cloud resources. The team owns two platforms: a Cloud Cost Management Platform tracking GCP spend and a Security & Access Platform covering JIT access, ABAC and self-service credentials. This role moves infrastructure security from reactive issue handling to proactive engineering.

Key responsibilities

• Own the infrastructure security roadmap, moving beyond ticket handling to proactive security engineering.
• Establish and enforce security governance by turning security policies into technical controls and guardrails.
• Identify abnormal infrastructure and security issues early, investigate root causes and document learnings.
• Modernise legacy infrastructure and reduce security and operational risk.
• Partner with engineering and security stakeholders to improve the security posture of Airwallex's infrastructure.

Required profile

• Strong software engineering experience with a clear security mindset.
• Experience responding to infrastructure security issues and turning them into preventative controls.
• Experience designing and implementing security governance, policy enforcement or infrastructure security controls.
• Experience with legacy systems and improving their security, reliability or maintainability.
• Ability to own work end to end, from problem identification and roadmap through rollout and improvement.
• Strong communication skills, including documenting security issues and explaining technical risk to InfoSec and engineering teams.

Preferred skills

• Cloud infrastructure and cloud security, especially GCP or AWS.
• IAM, RBAC or ABAC, least-privilege access, secrets management or zero-trust principles.
• Infrastructure tooling, security automation, policy-as-code or preventative controls.
• Kubernetes, CI/CD security or infrastructure observability.
• Platform engineering, infrastructure, DevOps, SRE or security engineering background.