Principal Engineer, DevSecOps

• Own the health, security and evolution of OFX’s AWS estate supporting payments, client-facing applications and internal systems
• Set direction for cloud infrastructure, delivery pipelines and security controls across OFX Engineering
• Build and operate a secure, standardised and automated paved-road platform using GitHub Actions, scanning and policy-as-code
• Enable engineering teams to ship production-ready services with minimal friction
• Engineer security, compliance and reliability into the platform
• Work with Engineering Directors, engineering managers, principal engineers, tech leads, Security and Technology Operations
• Design, build and maintain secure engineering infrastructure and delivery pipelines
• Review infrastructure and pipeline changes from other engineers
• Mentor teams on cloud and security practices
• Shape the platform and security roadmap
• Lead by example in code, design and incident response
• Set engineering, operational excellence and security standards
• Build relationships with engineering and security stakeholders
• Explain trade-offs to technical and non-technical audiences
• Lead without formal line-management authority

• 10+ years hands-on experience designing, building and operating production AWS workloads in a medium to large enterprise
• Experience with multi-account setups, VPC networking, IAM, Lambda, ECS/Fargate, RDS and observability tooling
• 10+ years of CI/CD experience across application and infrastructure pipelines
• Experience with Jenkins, GitLab CI, Azure DevOps, CircleCI or TeamCity
• Extensive current GitHub Actions experience
• Secure credential handling in medium to large enterprise environments
• Software engineering background in TypeScript, Python, Go or C#
• Habit of writing tests, conducting code reviews and following release discipline
• Cloud security engineering experience, including least-privilege IAM, RBAC, SSO, MFA, secrets management and CSPM remediation using tools such as Wiz
• Experience embedding SAST, SCA, secrets, container and IaC scanning, and policy-as-code into pipelines
• Experience automating compliance evidence for ISO 27001, SOC 2, PCI DSS and AWS Well-Architected Framework
• Track record leading incidents and post-incident reviews under real change control
• Experience with event-driven, serverless or distributed architectures, ideally in SaaS or fintech
• Clear communication skills, including writing design documents and explaining trade-offs to technical and non-technical stakeholders
• Availability for an on-call rotation and occasional out-of-hours maintenance
• AWS Professional or relevant Security certification
• Experience in a regulated financial services or payments environment is desirable
• Contribution to a penetration test remediation or certification cycle is desirable

• Wide range of learning and career development opportunities
• Leadership training
• Secondments and internal mobility
• Access to a large library of online learning
• Annual volunteer day
• Matched giving
• Opportunity to nominate charity of choice every quarter
• Global and regional recognition channels and awards
• Quarterly and annual awards
• Milestone recognition and shout outs
• Employee-led wellbeing activities and social events
• Primary and secondary gender-neutral carer parental leave (16 weeks) or birthday leave
• Hybrid work model
• Work-life balance and flexibility
• Inclusive, diverse and non-hierarchical culture
• Accommodation during recruitment and hiring process