Platform Lead (Security & Infrastructure)

Platform Lead (Security & Infrastructure) About Us 🚀 Bridgit is a leading non-bank lender transforming the way Australians access property finance. Purpose-built to make property transactions faster and easier, we pioneered the Buy Now, Sell Later solution – empowering homeowners to unlock their property equity and move on their terms. With a simple digital application, fast approvals, and flexible loan options, we’re making property finance seamless and stress-free. We’re now five years old and making huge strides. We have accredited over three quarters of Australia’s broker network, and launched white label solutions with Australia’s largest aggregators – Connective, Aussie Home Loans, Finsure, and Loan Market Group – and we’re just getting started. Our momentum has been recognised with awards such as Best Growth Story at the 2025 Fintech Awards, 2025 Finder People’s Choice Award for Lending Innovation, finalist for Excellence in Lending (Business & Consumer) at the 2025 Finnies, Deloitte’s Tech Fast 50 2025, and being recognised as one of LinkedIn’s top 20 Start Ups in Australia 2025. The role You will be the architect and guardian of the infrastructure where our customer data lives and our web applications operate. As our Platform Lead, you will spearhead our foundational engineering efforts while embedding security deeply into our engineering culture. You will focus on building scalable infrastructure, identifying vulnerabilities, securing our cloud perimeter and ensuring that our code and environments meet the highest security standards before they reach production. Beyond identifying risks, you'll build the automated guardrails and internal developer platforms that allow our engineering teams to move fast without breaking things. By architecting and securing our AWS environments, fortifying our edge network and driving DevSecOps practices, your work will directly enable developer velocity, protect our customers' financial data and ensure the resilient operation of a modern lending platform. This is a hands-on, 'player-coach' role. While you will guide the strategic direction of our platform and security posture, you will remain deeply technical - engineering secure-by-default infrastructure, integrating security tooling directly into our CI/CD pipelines, remediating complex vulnerabilities and leading from the trenches by example. What you’ll do Lead platform engineering and cloud security: Proactively design scalable AWS architectures and author secure-by-default Infrastructure as Code (Terraform). Identifying, introducing, and improving security controls across Bridgit’s, engineering, and cloud infrastructure disciplines. Leading threat modelling code review exercises for new and complex architectures and features. Defend the perimeter: Configure and actively manage our edge network defenses, including Web Application Firewalls (WAF), DDoS mitigation and API security. Automate security: Optimise and maintain robust CI/CD pipelines, directly embedding and managing automated application security testing. Drive remediation: Own infrastructure reliability and continuous vulnerability management across our cloud-native stack (containers and serverless). Guide architecture: Act as the core subject matter expert during system design reviews, ensuring high availability and alignment with fintech data protection standards. Champion a "shift-left" culture: Remain deeply hands-on while mentoring developers and DevOps engineers on secure coding, robust system design and cloud security fundamentals. What we are looking for Essential Experience 6+ years of experience in Platform Engineering, Cloud Infrastructure, or DevSecOps, preferably within a regulated fintech or high-growth tech environment. Player-Coach mentality: Demonstrated leadership capabilities combined with a strong desire to remain in a highly hands-on, technical capacity. Deep technical proficiency with industry-standard infrastructure and security tooling, specifically AWS, Terraform, CI/CD platforms (e.g., GitHub Actions) and SAST/DAST/SCA integrations. Cloud-native expertise: A strong understanding of modern architectures, encompassing the performance, reliability and security of containers (Docker/Kubernetes) and serverless environments. Edge security track record: Proven experience managing edge platforms (Cloudflare highly preferred), including WAF rule tuning and bot management. Compliance familiarity: Working knowledge of auditability standards relevant to financial services (e.g., SOC 2, ISO 27001, PCI-DSS). Collaborative communicator: The ability to clearly deconstruct complex architectural risks to cross-functional teams, favoring building "paved roads" and secure defaults over acting as a gatekeeper. Our culture and benefits Bridgit values its team – they’re the heart of how we build this business. Along with competitive remuneration, a great office in Sydney, and the chance to be part of an innovative, fast-moving fintech, we also offer: Extra leave – birthday leave plus an additional day of paid leave for life events, celebrations, or a mental health reset. Two weeks from anywhere – work remotely from a location of your choice for two weeks each year. Learning and development – all team members are encouraged and empowered to engage in professional development, including internal learning initiatives. Social events – a jam-packed social scene with events throughout the year to bring the team together. Ready to make an impact? If you’re passionate about shaping how great product teams operate and want to join a team that values fresh thinking and real impact, we’d love to hear from you. Apply now and help shape the future of finance. 🚀 Department Tech Team Locations Sydney Remote status Hybrid