SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
As a Senior Engineer in Xero's Cloud Platform Access team, you will design and operate identity and access controls at scale across AWS, GCP, and Azure. This is high-leverage platform security work where you shape secure access as a product rather than simply processing requests. You'll combine hands-on technical leadership with deep expertise to build guardrails that enable teams to ship quickly without creating excessive privilege or long-lived credentials.
You'll mentor engineers on the team, foster psychological safety, and role-model modern engineering practices. The work sits at the intersection of cloud infrastructure, security, developer experience, and automation—solving genuine problems that unlock productivity across the organization.
The Cloud Platform Access team owns cloud-native identity, access management, and policy enforcement across public cloud environments. You'll work collaboratively with platform, security, and product teams to integrate secure-by-default controls early in delivery. The team values psychological safety, thoughtful automation, and engineering excellence.
Current team priorities include understanding services, risks, and gaps in IAM setup across AWS, GCP, and Azure; closing critical identity handover gaps and taking ownership of bounded IAM, Workload Identity Federation, or self-service improvements; establishing KPI baselines and contributing to design reviews, operations, and mentoring; and evolving reusable Terraform modules, policy frameworks, and internal tooling to standardize secure access patterns.
You bring solid experience securing at least one public cloud environment with genuine willingness to learn the others. You understand Identity and Infrastructure as Code fundamentals. You've designed and maintained reusable Terraform modules and automation that codify IAM controls and policy guardrails at scale. Strong software engineering foundations run through your work: you think automation-first, have proficiency in at least one scripting language like Python, and follow modern delivery practices. You lead technical design conversations, make sound engineering trade-offs, and mentor others. You approach problems collaboratively, building trust across security, platform, and product teams to enable rapid, secure delivery. You're curious about thoughtful AI applications and open to exploring how it might accelerate engineering workflows.
The role is based in Auckland or Wellington with a hybrid working model that balances local team presence with global scope. You'll have flexibility to work from home while connecting with colleagues during designated boost days.
