Position: Cybersecurity DevOps Engineer - 12 Months Fixed Term role.
Datacom Location: Anywhere in Australia
Security Requirements: AU Citizens and Residents Only
Full Time, 12 Months Fixed-Term Position.
Our Why
Datacom works with organisations and communities across Australia and New Zealand to make a difference in people’s lives and help them to use the power of tech to innovate and grow.
About the Role (Your Why)
As a Cybersecurity DevOps Engineer, you will play a key role in delivering Datacom's cybersecurity uplift programme by embedding security controls into our software development and infrastructure delivery platforms.
Working at the intersection of cybersecurity, software engineering and platform operations, you will design and implement secure-by-default practices across our GitHub ecosystem, CI/CD pipelines, Infrastructure as Code (IaC) platforms and cloud environments.
This role is focused on automation, security engineering and continuous improvement. You will help build the security guardrails that enable development teams to deliver quickly and safely while ensuring compliance with organisational policies and security standards.
You will work closely with developers, architects, platform engineers, system administrators and security specialists to uplift our DevSecOps capabilities, automate compliance activities and improve the security posture of both cloud and on-premises environments.
Our offices are based in Brisbane. We like to bring people together in person when we can, but we are mindful of the benefits of working from home for work/life balance. We therefore leave it to you and the team you join to decide what works best.
What You'll Do
At the moment, as a Cybersecurity DevOps Engineer, you will be focused on:
-
Designing, implementing and improving enterprise DevSecOps practices across development and infrastructure teams
-
Building and maintaining secure CI/CD pipelines that incorporate automated security controls and quality gates
-
Administering and governing GitHub repositories, workflows and security controls
-
Implementing security controls through Infrastructure as Code (IaC) and platform automation
-
Developing and maintaining Policy as Code capabilities to enforce security, compliance and organisational standards
-
Integrating and managing security tooling, including SAST, software composition analysis and vulnerability scanning capabilities
-
Supporting and enhancing our application security platforms, including Aikido and related security tooling
-
Establishing controls to detect, report and remediate configuration drift across cloud and infrastructure environments
-
Implementing software supply chain security controls and secure development practices
-
Designing and delivering automation workflows using tools such as GitHub Actions, n8n and other orchestration platforms
-
Automating security assurance activities including peer review enforcement, repository governance, branch protections and security review processes
-
Supporting developers and delivery teams to adopt secure software development lifecycle (SSDLC) practices
-
Working with security and governance teams to translate security requirements into automated technical controls
-
Participating in architecture reviews, code reviews and solution design activities
-
Supporting cybersecurity governance, risk management and continuous improvement initiatives
-
Contributing to security uplift projects and operational excellence programmes across the organisation
We are an agile organisation and continuously evolve to meet customer, technology and business needs. This means the role will continue to grow alongside our platforms, services and security capabilities.
What You'll Bring
Required Experience
-
5+ years' experience in DevOps, DevSecOps, Platform Engineering, Security Engineering, Site Reliability Engineering or a similar role
-
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Software Engineering or related discipline
-
Strong understanding of modern DevSecOps principles and secure software development lifecycle (SSDLC) practices
-
Demonstrated experience designing and supporting CI/CD pipelines in enterprise environments
-
Strong experience with GitHub, GitHub Actions and repository governance practices
-
Hands-on experience implementing Infrastructure as Code using technologies such as Terraform, Bicep, CloudFormation or equivalent
-
Experience implementing and maintaining Policy as Code controls and automated compliance frameworks
-
Experience integrating security controls into software delivery pipelines
-
Experience working with application security tooling including SAST, software composition analysis, secret detection and vulnerability management platforms
-
Strong understanding of cloud security principles across Azure, AWS and GCP
-
Experience designing and implementing automation solutions that improve operational efficiency and security outcomes
-
Experience identifying, monitoring and remediating configuration drift across infrastructure environments
-
Strong knowledge of cybersecurity principles, identity security, infrastructure security and cloud security
-
Familiarity with security frameworks including ISO 27001, NIST CSF, ACSC Essential Eight, MITRE ATT&CK and government security frameworks
-
Strong analytical, troubleshooting and problem-solving skills
-
Excellent stakeholder engagement, communication and collaboration skills
-
Ability to mentor team members and promote DevSecOps best practices across engineering teams
-
Commercial awareness with an understanding of project delivery, operational outcomes and continuous improvement
Nice to Have
-
Experience with Aikido or similar application security platforms
-
Experience implementing secure software supply chain programmes
-
Experience with Open Policy Agent (OPA), Azure Policy, HashiCorp Sentinel or equivalent Policy as Code technologies
-
Experience implementing repository governance at scale
-
Experience using automation and orchestration platforms such as n8n, GitHub Actions, Power Automate or similar technologies
-
Experience managing enterprise GitHub environments
-
Experience with software assurance activities including SBOM generation and dependency management
-
Experience within a managed services or Tier 2 service provider environment
-
Cloud certifications from AWS, Microsoft Azure or Google Cloud
-
Security certifications such as CISSP, CISM, CCSP, CSSLP, GCSA or relevant SANS certifications
-
Experience with container security, Kubernetes and cloud-native security controls
Why Join Us Here at Datacom?
Datacom is one of Australia and New Zealand’s largest suppliers of Information Technology professional services. We have managed to maintain a dynamic, agile, small business feel that is often diluted in larger organisations of our size. It's our people that give Datacom its unique culture and energy that you can feel from the moment you meet with us.
We care about our people and provide a range of perks such as social events, chill-out spaces, remote working, flexi-hours and professional development courses to name a few. You’ll have the opportunity to learn, develop your career, connect and bring your true self to work. You will be recognised and valued for your contributions and be able to do your work in a collegial, flat-structured environment.
We operate at the forefront of technology to help Australia and New Zealand’s largest enterprise organisations explore possibilities and solve their greatest challenges, so you will never run out of interesting new challenges and opportunities.
We want Datacom to be an inclusive and welcoming workplace for everyone and take pride in the steps we have taken and continue to take to make our environment fun and friendly, and our people feel supported.
