Principal Engineer, DevSecOps

Job Description

As a senior technical leader within the engineering practice, the Principal Engineer, DevSecOps owns the health, security and evolution of the AWS estate that OFX's payments, client-facing applications and internal systems run on. You will set the direction for how cloud infrastructure, delivery pipelines and security controls are designed, built and operated across OFX Engineering. 

Your primary responsibility is to build and run the paved road: a secure, standardised and automated platform (GitHub Actions, scanning and policy-as-code) that lets engineering teams ship production-ready services with minimal friction, while security, compliance and reliability are engineered in rather than bolted on. 

You will work together with the Engineering Directors, engineering managers, principal engineers, tech leads, the Security team and Technology Operations to deliver impactful outcomes for OFX. You will design, build and maintain the secure paved road for engineering. You will also review infrastructure and pipeline changes from other engineers, mentor teams on cloud and security practice, and help shape the platform and security roadmap. 

The Principal Engineer, DevSecOps strives to achieve the highest levels of engineering practice, operational excellence and security posture. You will be hands-on, leading by example in code, design and incident response, and setting standards that others adopt because they make the work easier and safer. 

In addition to deep technical expertise, you will need strong influencing skills: building relationships with engineering and security stakeholders, explaining trade-offs to technical and non-technical audiences, and leading without needing the line-management title. 

Qualifications

• 10+ years hands-on experience designing, building and operating production AWS workloads, including multi-account setups, VPC networking, IAM, Lambda, containers (ECS/Fargate), RDS and observability tooling in a medium to large Enterprise. 

• 10+ years of CI/CD experience across application and infrastructure pipelines using mainstream tooling (e.g. Jenkins, GitLab CI, Azure DevOps, CircleCI, TeamCity), with extensive current GitHub Actions experience and secure credential handling in medium to large enterprise environments.

• A genuine software engineering background in at least one general-purpose language (TypeScript, Python, Go or C#), with tests, code review and release discipline as habit. 

• Demonstrable cloud security engineering, including least-privilege IAM, RBAC, SSO, MFA, secrets management and remediation using CSPM tooling such as Wiz. 

• Experience embedding security controls into pipelines (SAST, SCA, secrets, container and IaC scanning, policy-as-code). 

• Experience automating compliance evidence against frameworks such as ISO 27001, SOC 2, PCI DSS and the AWS Well-Architected Framework. 

• A track record leading incidents and post-incident reviews under real change control. 

• Experience working with event-driven, serverless or distributed architectures, ideally in SaaS or fintech. 

• Clear communication skills, including writing design documents and explaining trade-offs to technical and non-technical stakeholders. 

• Availability for an on-call rotation and occasional out-of-hours maintenance. 

• AWS Professional or relevant Security certification;  

• Desirable: Experience in a regulated financial services or payments environment; contribution to a penetration test remediation or certification cycle. 

Additional Information

What it's like working at OFX

We’re OFXers because we want to make a difference. We see challenges as opportunities and we’re not afraid to roll up our sleeves to get stuff done. We’re committed to making things easier for our clients, pushing boundaries and continuing to move with the times so that we can continue to inspire confidence every day and through every transaction.

We operate as one team, cross-functionally and globally, to drive outcomes that deliver excellence for our customers. We're curious self-starters who love learning and sharing our knowledge with others. We embrace change and use our initiative and resilience to overcome challenges.

• Always keep learning. We offer a wide range of learning and career development opportunities to help every OFXer build their capacity and career, with leadership training, secondments, internal mobility and access to a large library of online learning.
• Make a difference. Through our Make a Difference program, we encourage OFXers to give back to causes and communities that are important to them. We celebrate this with an annual volunteer day, which OFXers can use together or individually, as well as matched giving and the opportunity to nominate charity of choice every quarter.
• Reward and recognition. We recognise a job well done. OFXers are encouraged to celebrate their peers’ effort, technical expertise or support through a range of global and regional channels and awards, including quarterly and annual awards, milestones and shout outs.
• Showing our social side. Our Good Vibes employee-led committees around the globe organize events to help keep our employees engaged inside and outside the office. Whether it’s a wellbeing activity, end of year celebration, or a monthly team get-together, our team wants you to feel welcome!
• Benefits that mean something. We offer a range of fantastic benefits, including primary and secondary gender neutral carer parental leave (16 weeks) or birthday leave, you'll feel well-supported at OFX.
• A great work environment. Enjoy work-life balance and flexibility with our hybrid work model, in an inclusive, diverse and non-hierarchal culture.

At OFX, we are committed to fostering a diverse, inclusive and accessible workplace where we value, respect, and encourage our people to be their authentic selves. With an employee base as diverse as the clients we serve, we know that fostering an inclusive workplace is fundamental to our continued success. If you require accommodation for any portion of the recruitment and hiring process, please email us at [email protected].

We encourage you to apply if this role aligns with your career aspirations.