Senior Platform Engineer

Senior Platform Engineer
Permanent, full time
Melbourne CBD, hybrid 
Up to $185,000 + Superannuation

About the opportunity:
Our client is a fast growing, global SaaS business built around a platform that powers large scale programs for not for profit organisations, local government and major sporting and community events across the world. The business is mid transformation, with new engineering leadership building out a proper Platform Engineering function and shifting toward a security first, shift left way of working. This is a genuine build phase, not a maintenance role, on a small, close knit engineering team where the person hired will have real influence over how the platform is run.

What you'll be doing:

• Owning cloud infrastructure and the container platform (AWS EKS), moving it from ClickOps into infrastructure as code
• Embedding security as a paved road across the engineering team rather than a gate, covering secrets management, identity and access, and policy as code guardrails
• Automating control enforcement and evidence collection for SOC 2 and ISO 27001, and owning technical evidence during audits
• Building security into CI/CD pipelines, including dependency, secret, container and IaC scanning
• Implementing and maintaining observability, alerting and incident response for both reliability and security events
• Improving developer experience through better local workflows, automation and consistent environments
• Helping the business safely enable AI at scale, including securing LLM, RAG and vector workloads

What we need to see:

• 7+ years in DevOps, platform or SRE roles supporting production SaaS, with security a recurring theme
• Strong AWS experience (EKS, EC2, RDS, S3)
• Infrastructure as code (Terraform, CDK or similar)
• Solid Docker, Linux and container orchestration fundamentals
• Hands on experience with cloud IAM, KMS and secrets management
• Experience embedding security into CI/CD pipelines
• Comfortable participating in incident response and on call, for reliability and security events

Bonus points:

• Experience in a compliance environment (SOC 2, ISO 27001, Essential Eight or GDPR), including producing audit evidence
• Hands on with Vanta or comparable GRC/compliance automation tooling
• Comfortable working in a PHP/Laravel codebase to remediate application level security findings
• Exposure to GCP (GKE, IAM)
• AI/LLM security awareness (OWASP LLM Top 10, securing RAG and model endpoints)
• A security certification such as AWS Security Specialty or CKS