Security & Access Platform — a zero-trust access control system covering Just-In-Time (JIT) access, Attribute-Based Access Control (ABAC), and self-service credential management for all production GCP environments and CI/CD pipelines.
Our work directly impacts engineering productivity, cost governance, and the security posture of the entire company.
You'll help move infrastructure security from reactive issue handling to proactive engineering, building the controls and roadmap needed to make secure ways of working the default.
Own the infrastructure security roadmap, moving beyond ticket handling to proactive security engineering.
Establish and enforce security governance across infrastructure by translating security policies into practical technical controls and guardrails.
Identify abnormal infrastructure and security issues early, investigate root causes, and share learnings through clear internal documentation and technical write-ups.
Modernise legacy infrastructure and reduce the security and operational risk created by systems that need remediation.
Partner with engineering and security stakeholders to improve the security posture of Airwallex's infrastructure while keeping delivery practical and effective.
WHAT WE'RE LOOKING FOR
Essentials
Strong software engineering experience with a clear security mindset and the ability to build secure, maintainable infrastructure solutions.
Experience responding to infrastructure security issues and translating lessons learned into preventative controls.
Experience designing and implementing security governance, policy enforcement, or infrastructure security controls.
Experience working with legacy systems and improving their security, reliability, or maintainability.
Ability to own work end to end, from identifying a problem and shaping a roadmap through implementation, rollout, and ongoing improvement.
Strong communication skills, including documenting security issues, explaining technical risk, and working effectively with InfoSec and engineering teams.
Preferred
Experience with cloud infrastructure and cloud security, particularly GCP or AWS.
Experience with IAM, RBAC or ABAC, least-privilege access, secrets management, or zero-trust security principles.
Experience building infrastructure tooling, security automation, policy-as-code, or preventative controls.
Experience with Kubernetes, CI/CD security, or infrastructure observability.
Experience in a platform engineering, infrastructure, DevOps, SRE, or security engineering team.
YOU'LL THRIVE HERE IF
You're comfortable owning the roadmap yourself.
You own the outcome and you don't wait for permission to fix what's broken.
You hold yourself to a high standard even when no one is watching. Quality and accountability aren't external expectations, they're internal ones.
You're comfortable with ambiguity. Give you a problem, not a prescription, and you'll run with it.
You default to action. You'd rather course-correct in motion than wait for perfect clarity.
LEARN MORE ABOUT YOUR TEAM
The Infrastructure & Productivity team at Airwallex builds the technical foundation that allows our global engineering organization to scale. Our customers are our fellow engineers, and our mission is to make their daily work faster, safer, and more effective by managing the core platforms everyone relies on, from Kubernetes and Kafka to CI/CD pipelines and observability systems. The real challenge lies in keeping these global systems highly reliable and secure while simultaneously optimizing cloud costs, automating manual support, and driving standardization without slowing down product delivery. We operate under the philosophy that best practices should be the path of least resistance, not a forced mandate. If you're a systems thinker who wants to work close to the core of the company and directly shape how we build, deploy, and scale software worldwide, this is where that work happens.
APPLICANT SAFETY POLICY: FRAUD AND THIRD-PARTY RECRUITERS
To protect you from recruitment scams, please be aware that Airwallex will not ask for bank details, sensitive ID numbers (i.e. passport), or any form of payment during the application or interview process. All official communication will come from an @airwallex.com http://airwallex.com email address. Please apply only through careers.airwallex.com http://careers.airwallex.com or our official LinkedIn page.
Airwallex does not accept unsolicited resumes from search firms/recruiters. Airwallex will not pay any fees to search firms/recruiters if a candidate is submitted by a search firm/recruiter unless an agreement has been entered into with respect to specific open position(s). Search firms/recruiters submitting resumes to Airwallex on an unsolicited basis shall be deemed to accept this condition, regardless of any other provision to the contrary.
EQUAL OPPORTUNITY
Airwallex is proud to be an equal opportunity employer. We value diversity and anyone seeking employment at Airwallex is considered based on merit, qualifications, competence and talent. We don’t regard color, religion, race, national origin, sexual orientation, ancestry, citizenship, sex, marital or family status, disability, gender, or any other legally protected status when making our hiring decisions. If you have a disability or special need that requires accommodation, please let us know.
