Senior Security Engineer - Cloud Platform @Xero

Overview

The role involves working as a Senior Engineer in the Cloud Platform Access team, focusing on designing and operating identity and access controls at scale across AWS, GCP, and Azure. The position emphasizes shaping secure access as a product and providing technical leadership within the organization.

Key Responsibilities

• Design and operate identity and access controls across public cloud environments.
• Mentor engineers and foster a culture of psychological safety and modern engineering practices.
• Collaborate with various teams to integrate secure controls early in the delivery process.
• Work on projects that include understanding services and risks in the IAM setup and establishing operational baselines.
• Contribute to design reviews and evolve reusable Terraform modules and internal tooling.

Requirements

• Experience securing at least one public cloud environment (AWS, GCP, or Azure) with a willingness to learn others.
• Experience designing and maintaining reusable Terraform modules and automation for IAM controls.
• Strong software engineering foundations, proficiency in at least one scripting language (e.g., Python), and understanding of modern delivery practices.
• Ability to lead technical design discussions and mentor team members.
• Collaborative approach to problem-solving and building trust across teams.
• Curiosity about AI applications in engineering workflows.

Benefits

Xero encourages candidates with diverse experiences to apply, valuing skills, passion, and unique perspectives.

Location

This role can be based in either Auckland or Wellington within a hybrid working model, allowing flexibility to work from home or the office.

How to Apply

Applications can be submitted through the company career page.