DevSecOps Engineer

Who is Shift

At Shift were business specialists dedicated to helping Australian SMEs take control of their cashflow streamline trade terms and choose the right financial products.

We believe Australian businesses are the driving force behind our economy and are core to our communities. Thats why our business expertise focus on relationships and market-leading technology is at the core of everything we do. Weve helped solve the credit and payment pain points for more than 30000 businesses providing over $6 billion in aggregate funding.

Our unique approach to product innovation combined with our collaborative culture means you can build your career in a supportive environment. Youll be joining a diverse team of over 300 people who are always looking to deliver better outcomes for Australian businesses.

About the role:

At Shift DevSecOps isnt a ticket queue. You wont be handed a change request and told to execute it youll be one of the people deciding how our cloud infrastructure gets built secured and kept running. Our engineers carry real decision-making power not just delivery responsibility and the problems youll be solving are ours alone to solve because our data and decisioning capability is what makes Shift Shift. This is a hands-on role for someone who wants to own complex infrastructure and security work end to end.

What youll do:

• Lead complex DevOps and security initiatives across Shifts cloud environments from design through to delivery.

• Build maintain and continuously improve our automated deployment pipelines using DevOps best practice.

• Drive security testing vulnerability scanning and remediation across production data and operational infrastructure.

• Set the standard for security best practice - policies risk assessments controls and processes and guide the wider infrastructure team in applying it.

• Keep a live watch on emerging security threats and industry trends and get ahead of risk before it becomes an incident.

• Partner closely with our engineering teams to embed security into applications and tooling from the start.

• Identify infrastructure and security uplift work thats been queued for too long and lead it end to end - wed rather fix things properly once than patch them repeatedly.
  

What youll bring:

• 3-5 years in a cloud infrastructure or security-focused technology role.

• Strong hands-on experience with Azure (IaaS and PaaS).

• Proficiency in at least one scripting or programming language (Python PowerShell Bash or C#).

• Hands-on experience with Docker and Kubernetes with working knowledge of Helm.

• A solid grasp of security fundamentals (IAM WAF vulnerability management) backed by real implementation experience.

• Experience with CSPM/KSPM tooling network security controls (NSGs application gateways firewalls private links) and secrets management (Azure Key Vault).

• Proven experience building and managing CI/CD pipelines (GitHub Enterprise GitOps via Flux CD or Argo CD Octopus Deploy).

• Azure Entra ID experience is preferred; exposure to Azure SQL or APM tooling like Dynatrace is a bonus.

• Comfort with ambiguity and a bias for figuring things out rather than waiting for a playbook - the tempo here is fast and the team is lean.

Key benefits:

• Collaborative teams a flat structure means everyone can learn from colleagues and senior leaders around the business.

• Be involved come together with all of your colleagues every 100 days to share the product and technology roadmap and business strategy.

• Flexible working environment were headquartered in North Sydney with state-based workplaces and offer a flexible work policy.

• Family support industry leading 26 weeks paid parental leave.

• Purpose built spaces within our office designed for collaboration brainstorming socialising and focused work.

• Range of benefits supporting your physical psychological and financial wellbeing. From a day off on your birthday to excellent end of trip facilities.

#LI-Hybrid

Required Experience:

IC