DevSecOps Engineer

Who is Shift? At Shift, we’re business specialists dedicated to helping Australian SMEs take control of their cashflow, streamline trade terms and choose the right financial products. We believe Australian businesses are the driving force behind our economy and are core to our communities. That’s why our business expertise, focus on relationships, and market-leading technology is at the core of everything we do. We’ve helped solve the credit and payment pain points for more than 30,000 businesses, providing over $6 billion in aggregate funding. Our unique approach to product innovation combined with our collaborative culture means you can build your career in a supportive environment. You’ll be joining a diverse team of over 300 people who are always looking to deliver better outcomes for Australian businesses. About the role: At Shift, DevSecOps isn't a ticket queue. You won't be handed a change request and told to execute it, you'll be one of the people deciding how our cloud infrastructure gets built, secured and kept running. Our engineers carry real decision-making power, not just delivery responsibility, and the problems you'll be solving are ours alone to solve, because our data and decisioning capability is what makes Shift Shift. This is a hands-on role for someone who wants to own complex infrastructure and security work end to end. What you'll do: Lead complex DevOps and security initiatives across Shift's cloud environments, from design through to delivery. Build, maintain and continuously improve our automated deployment pipelines using DevOps best practice. Drive security testing, vulnerability scanning and remediation across production, data and operational infrastructure. Set the standard for security best practice - policies, risk assessments, controls and processes and guide the wider infrastructure team in applying it. Keep a live watch on emerging security threats and industry trends, and get ahead of risk before it becomes an incident. Partner closely with our engineering teams to embed security into applications and tooling from the start. Identify infrastructure and security uplift work that's been queued for too long, and lead it end to end - we'd rather fix things properly once than patch them repeatedly. What you'll bring: 3-5+ years in a cloud infrastructure or security-focused technology role. Strong hands-on experience with Azure or AWS (IaaS and PaaS) - we run on Azure, but strong AWS experience that translates across is welcome. Proficiency in at least one scripting or programming language (Python, PowerShell, Bash or C#). Hands-on experience with Docker and Kubernetes, with working knowledge of Helm. A solid grasp of security fundamentals (IAM, WAF, vulnerability management) backed by real implementation experience. Experience with CSPM/KSPM tooling, network security controls (NSGs, application gateways, firewalls, private links), and secrets management (Azure Key Vault). Proven experience building and managing CI/CD pipelines (GitHub Enterprise, GitOps via Flux CD or Argo CD, Octopus Deploy). Azure Entra ID experience is preferred; exposure to Azure SQL or APM tooling like Dynatrace is a bonus. Comfort with ambiguity and a bias for figuring things out rather than waiting for a playbook - the tempo here is fast and the team is lean. Key benefits: Collaborative teams – a flat structure means everyone can learn from colleagues and senior leaders around the business. Be involved – come together with all of your colleagues every 100 days to share the product and technology roadmap and business strategy. Flexible working environment – we’re headquartered in North Sydney with state-based workplaces and offer a flexible work policy. Family support – industry leading 26 weeks paid parental leave. Purpose built spaces within our office – designed for collaboration, brainstorming, socialising, and focused work. Range of benefits supporting your physical, psychological and financial wellbeing. From a day off on your birthday to excellent end of trip facilities. #LI-Hybrid