hirq
← All jobs

Airwallex

Senior Software Engineer, Infra (Cloud Security Platform)

SG - Singapore · On-site · FullTime · Engineering

Apply well, not just fast

Create a free account and upload your resume to get a match score, keyword gaps, a tailored resume, a cover letter and interview prep for this job.

About the role

GCPCI/CDKubernetesObservabilityCloud SecurityKafkaAWSSRECybersecurityIAM
ABOUT AIRWALLEX Airwallex is the AI-native financial operating system for a real-time, intelligent economy. More than 675,000 businesses, including McLaren Racing, Qantas, SHEIN, and TikTok, use us, directly or through our platform partners, to run their financial operations or build and monetize financial products of their own. We started in Melbourne in 2015 to build the infrastructure global commerce runs on. We're the regulated backbone behind global payments: not by accident, but by design. A decade plus, 85+ licenses, and a financial infrastructure spanning North America, Europe, the Middle East, and Asia-Pacific. We're co-headquartered in San Francisco and Singapore, with more than 2,700 people across 27 offices. We hire builders with founder-level energy, people who move fast with good judgment, dig in with real curiosity, and make calls from first principles rather than waiting to be told what to do. Read our operating principles https://www.airwallex.com/en-us/operating-principles to see it in full.   HOW YOU'LL MAKE IMPACT We are the Cloud Platform Engineering team, responsible for the infrastructure systems that give the entire organization visibility and control over its cloud resources. We build two critical platforms: - Cloud Cost Management Platform — a billing and cost attribution system that tracks GCP spend across all departments, enables cross-department chargeback, and provides the data foundation for cost optimization across $30M+ in annual cloud spend. - Security & Access Platform — a zero-trust access control system covering Just-In-Time (JIT) access, Attribute-Based Access Control (ABAC), and self-service credential management for all production GCP environments and CI/CD pipelines. Our work directly impacts engineering productivity, cost governance, and the security posture of the entire company. You'll help move infrastructure security from reactive issue handling to proactive engineering, building the controls and roadmap needed to make secure ways of working the default. - Own the infrastructure security roadmap, moving beyond ticket handling to proactive security engineering. - Establish and enforce security governance across infrastructure by translating security policies into practical technical controls and guardrails. - Identify abnormal infrastructure and security issues early, investigate root causes, and share learnings through clear internal documentation and technical write-ups. - Modernise legacy infrastructure and reduce the security and operational risk created by systems that need remediation. - Partner with engineering and security stakeholders to improve the security posture of Airwallex's infrastructure while keeping delivery practical and effective. WHAT WE'RE LOOKING FOR Essentials - Strong software engineering experience with a clear security mindset and the ability to build secure, maintainable infrastructure solutions. - Experience responding to infrastructure security issues and translating lessons learned into preventative controls. - Experience designing and implementing security governance, policy enforcement, or infrastructure security controls. - Experience working with legacy systems and improving their security, reliability, or maintainability. - Ability to own work end to end, from identifying a problem and shaping a roadmap through implementation, rollout, and ongoing improvement. - Strong communication skills, including documenting security issues, explaining technical risk, and working effectively with InfoSec and engineering teams. Preferred - Experience with cloud infrastructure and cloud security, particularly GCP or AWS. - Experience with IAM, RBAC or ABAC, least-privilege access, secrets management, or zero-trust security principles. - Experience building infrastructure tooling, security automation, policy-as-code, or preventative controls. - Experience with Kubernetes, CI/CD security, or infrastructure observability. - Experience in a platform engineering, infrastructure, DevOps, SRE, or security engineering team. YOU'LL THRIVE HERE IF - You're comfortable owning the roadmap yourself. - You own the outcome and you don't wait for permission to fix what's broken. - You hold yourself to a high standard even when no one is watching. Quality and accountability aren't external expectations, they're internal ones. - You're comfortable with ambiguity. Give you a problem, not a prescription, and you'll run with it. - You default to action. You'd rather course-correct in motion than wait for perfect clarity. LEARN MORE ABOUT YOUR TEAM The Infrastructure & Productivity team at Airwallex builds the technical foundation that allows our global engineering organization to scale. Our customers are our fellow engineers, and our mission is to make their daily work faster, safer, and more effective by managing the core platforms everyone relies on, from Kubernetes and Kafka to CI/CD pipelines and observability systems. The real challenge lies in keeping these global systems highly reliable and secure while simultaneously optimizing cloud costs, automating manual support, and driving standardization without slowing down product delivery. We operate under the philosophy that best practices should be the path of least resistance, not a forced mandate. If you're a systems thinker who wants to work close to the core of the company and directly shape how we build, deploy, and scale software worldwide, this is where that work happens. APPLICANT SAFETY POLICY: FRAUD AND THIRD-PARTY RECRUITERS To protect you from recruitment scams, please be aware that Airwallex will not ask for bank details, sensitive ID numbers (i.e. passport), or any form of payment during the application or interview process. All official communication will come from an @airwallex.com http://airwallex.com email address. Please apply only through careers.airwallex.com http://careers.airwallex.com or our official LinkedIn page. Airwallex does not accept unsolicited resumes from search firms/recruiters. Airwallex will not pay any fees to search firms/recruiters if a candidate is submitted by a search firm/recruiter unless an agreement has been entered into with respect to specific open position(s). Search firms/recruiters submitting resumes to Airwallex on an unsolicited basis shall be deemed to accept this condition, regardless of any other provision to the contrary. EQUAL OPPORTUNITY Airwallex is proud to be an equal opportunity employer. We value diversity and anyone seeking employment at Airwallex is considered based on merit, qualifications, competence and talent. We don’t regard color, religion, race, national origin, sexual orientation, ancestry, citizenship, sex, marital or family status, disability, gender, or any other legally protected status when making our hiring decisions. If you have a disability or special need that requires accommodation, please let us know.