Principal Engineer, DevSecOps

Location: Remote, Sydney NSW, Australia; hybrid work model also mentioned.

Compensation: AUD 0–AUD 0 yearly.

Company

hirify.global is a financial operations company providing global business accounts, payments, currency risk management, corporate cards, bill payments, vendor management, and accounting and HRIS integrations.

What you will do

• Own the health, security, and evolution of the AWS estate supporting payments, client-facing applications, and internal systems.
• Set the direction for cloud infrastructure, delivery pipelines, and security controls across engineering.
• Build and operate a secure, standardised, automated paved road using GitHub Actions, scanning, and policy-as-code.
• Review infrastructure and pipeline changes, mentor engineering teams, and shape the platform and security roadmap.
• Lead by example in code, architecture, operational excellence, and incident response.
• Partner with Engineering Directors, engineering managers, principal engineers, tech leads, Security, and Technology Operations.

Requirements

• 10+ years of hands-on experience designing, building, and operating production AWS workloads in medium to large enterprises, including multi-account setups, VPC networking, IAM, Lambda, ECS/Fargate containers, RDS, and observability tooling.
• 10+ years of CI/CD experience across application and infrastructure pipelines, including extensive current GitHub Actions experience and secure credential handling.
• Software engineering experience in at least one general-purpose language: TypeScript, Python, Go, or C#, with testing, code review, and release discipline.
• Cloud security engineering experience covering least-privilege IAM, RBAC, SSO, MFA, secrets management, and remediation using CSPM tools such as Wiz.
• Experience embedding SAST, SCA, secrets, container, IaC scanning, and policy-as-code controls into pipelines.
• Experience automating compliance evidence for ISO 27001, SOC 2, PCI DSS, and the AWS Well-Architected Framework.
• Experience leading incidents and post-incident reviews under real change control.
• Experience with event-driven, serverless, or distributed architectures, ideally in SaaS or fintech.
• Clear communication skills, including writing design documents and explaining trade-offs to technical and non-technical stakeholders; availability for on-call rotation and occasional out-of-hours maintenance.
• AWS Professional or relevant Security certification.

Nice to have

• Experience in a regulated financial services or payments environment.
• Contribution to penetration test remediation or a certification cycle.

Culture & Benefits

• Global, cross-functional, inclusive, diverse, and non-hierarchical working environment.
• Learning and career development opportunities, leadership training, secondments, internal mobility, and access to online learning.
• Volunteer day, matched giving, and quarterly charity nominations.
• Peer recognition, awards, milestones, and team engagement events.
• Gender-neutral primary and secondary carer parental leave of 16 weeks and birthday leave.
• Work-life balance and flexibility through the hybrid work model.