Senior Security Engineer (Cloud)

Senior Security Engineer (Cloud) – Xero

Together with our Cloud Platform Access team, you will take a hands‑on approach to designing, building, and operating cross‑cloud identity and access controls at scale. You will play a pivotal role in designing secure patterns that serve as guardrails rather than roadblocks, ensuring our product teams can ship securely with minimal friction. By leveraging automation to reduce operational overhead, you will help evolve our platform standards while actively mentoring teammates and fostering a culture of technical excellence and psychological safety.

Team & How They Connect

The Cloud Platform Access team focuses on cloud‑native identity and access across AWS, GCP, and Azure. We own platform‑native IAM services, Terraform modules, and policy enforcement tooling to provide secure, scalable, and automated access in public‑cloud environments.

The team is currently working on

• Designing and operating cloud‑native IAM and policy frameworks across AWS, GCP, and Azure.
• Owning and evolving reusable Terraform modules and Service Control Policies to standardise access controls.
• Building internal tooling and automation bots to provision and revoke access with strong auditability.
• Designing secure patterns for Workload Identity Federation to remove the need for long‑lived credentials.

Where And How You Can Work

We’re a team split across Wellington and Auckland. This role can be based anywhere in New Zealand. We feel our working environment allows you to do the best work of your life, supported by a diverse team that respects and challenges you.

Qualifications

Apply even if your experience isn’t a perfect match! At Xero, we hire based on your skills, passion, and the unique perspective you can bring to enhance our culture and team.

Job details

Referrals increase your chances of interviewing at Xero by 2x.

#J-18808-Ljbffr