Senior Platform Engineer

Senior Platform Engineer Permanent, full time Melbourne CBD, hybrid Up to $185,000 + Superannuation About the opportunity: Our client is a fast growing, global SaaS business built around a platform that powers large scale programs for not for profit organisations, local government and major sporting and community events across the world. The business is mid transformation, with new engineering leadership building out a proper Platform Engineering function and shifting toward a security first, shift left way of working. This is a genuine build phase, not a maintenance role, on a small, close knit engineering team where the person hired will have real influence over how the platform is run. What you'll be doing: Owning cloud infrastructure and the container platform (AWS EKS), moving it from ClickOps into infrastructure as codeEmbedding security as a paved road across the engineering team rather than a gate, covering secrets management, identity and access, and policy as code guardrailsAutomating control enforcement and evidence collection for SOC 2 and ISO 27001, and owning technical evidence during auditsBuilding security into CI/CD pipelines, including dependency, secret, container and IaC scanningImplementing and maintaining observability, alerting and incident response for both reliability and security eventsImproving developer experience through better local workflows, automation and consistent environmentsHelping the business safely enable AI at scale, including securing LLM, RAG and vector workloads What we need to see: 7+ years in DevOps, platform or SRE roles supporting production SaaS, with security a recurring themeStrong AWS experience (EKS, EC2, RDS, S3)Infrastructure as code (Terraform, CDK or similar)Solid Docker, Linux and container orchestration fundamentalsHands on experience with cloud IAM, KMS and secrets managementExperience embedding security into CI/CD pipelinesComfortable participating in incident response and on call, for reliability and security events Bonus points: Experience in a compliance environment (SOC 2, ISO 27001, Essential Eight or GDPR), including producing audit evidenceHands on with Vanta or comparable GRC/compliance automation toolingComfortable working in a PHP/Laravel codebase to remediate application level security findingsExposure to GCP (GKE, IAM)AI/LLM security awareness (OWASP LLM Top 10, securing RAG and model endpoints)A security certification such as AWS Security Specialty or CKS