Cybersecurity DevOps Engineer - 12 Months Fixed Term

About this role

Position: Cybersecurity DevOps Engineer - 12 Months Fixed Term role. Datacom Location: Anywhere in Australia Security Requirements : AU Citizens and Residents Only Full Time, 12 Months Fixed-Term Position. Our Why Datacom works with organisations and communities across Australia and New Zealand to make a difference in people’s lives and help them to use the power of tech to innovate and grow. About the Role (Your Why) As a Cybersecurity DevOps Engineer, you will play a key role in delivering Datacom's cybersecurity uplift programme by embedding security controls into our software development and infrastructure delivery platforms. Working at the intersection of cybersecurity, software engineering and platform operations, you will design and implement secure-by-default practices across our GitHub ecosystem, CI/CD pipelines, Infrastructure as Code (IaC) platforms and cloud environments. This role is focused on automation, security engineering and continuous improvement. You will help build the security guardrails that enable development teams to deliver quickly and safely while ensuring compliance with organisational policies and security standards. You will work closely with developers, architects, platform engineers, system administrators and security specialists to uplift our DevSecOps capabilities, automate compliance activities and improve the security posture of both cloud and on-premises environments. Our offices are based in Brisbane. We like to bring people together in person when we can, but we are mindful of the benefits of working from home for work/life balance. We therefore leave it to you and the team you join to decide what works best. What You'll Do At the moment, as a Cybersecurity DevOps Engineer, you will be focused on: Designing, implementing and improving enterprise DevSecOps practices across development and infrastructure teams Building and maintaining secure CI/CD pipelines that incorporate automated security controls and quality gates Administering and governing GitHub repositories, workflows and security controls Implementing security controls through Infrastructure as Code (IaC) and platform automation Developing and maintaining Policy as Code capabilities to enforce security, compliance and organisational standards Integrating and managing security tooling, including SAST, software composition analysis and vulnerability scanning capabilities Supporting and enhancing our application security platforms, including Aikido and related security tooling Establishing controls to detect, report and remediate configuration drift across cloud and infrastructure environments Implementing software supply chain security controls and secure development practices Designing and delivering automation workflows using tools such as GitHub Actions, n8n and other orchestration platforms Automating security assurance activities including peer review enforcement, repository governance, branch protections and security review processes Supporting developers and delivery teams to adopt secure software development lifecycle (SSDLC) practices Working with security and governance teams to translate security requirements into automated technical controls Participating in architecture reviews, code reviews and solution design activities Supporting cybersecurity governance, risk management and continuous improvement initiatives Contributing to security uplift projects and operational excellence programmes across the organisation We are an agile organisation and continuously evolve to meet customer, technology and business needs. This means the role will continue to grow alongside our platforms, services and security capabilities. What You'll Bring Required Experience 5+ years' experience in DevOps, DevSecOps, Platform Engineering, Security Engineering, Site Reliability Engineering or a similar role Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Software Engineering or related discipline Strong understanding of modern DevSecOps principles and secure software development lifecycle (SSDLC) practices Demonstrated experience designing and supporting CI/CD pipelines in enterprise environments Strong experience with GitHub, GitHub Actions and repository governance practices Hands-on experience implementing Infrastructure as Code using technologies such as Terraform, Bicep, CloudFormation or equivalent Experience implementing and maintaining Policy as Code controls and automated compliance frameworks Experience integrating security controls into software delivery pipelines Experience working with application security tooling including SAST, software composition analysis, secret detection and vulnerability management platforms Strong understanding of cloud security principles across Azure, AWS and GCP Experience designing and implementing automation solutions that improve operational efficiency and security outcomes Experience identifying, monitoring and remediating configuration drift across infrastructure environments Strong knowledge of cybersecurity principles, identity security, infrastructure security and cloud security Familiarity with security frameworks including ISO 27001, NIST CSF, ACSC Essential Eight, MITRE ATT&CK and government security frameworks Strong analytical, troubleshooting and problem-solving skills Excellent stakeholder engagement, communication and collaboration skills Ability to mentor team members and promote DevSecOps best practices across engineering teams Commercial awareness with an understanding of project delivery, operational outcomes and continuous improvement Nice to Have Experience with Aikido or similar application security platforms Experience implementing secure software supply chain programmes Experience with Open Policy Agent (OPA), Azure Policy, HashiCorp Sentinel or equivalent Policy as Code technologies Experience implementing repository governance at scale Experience using automation and orchestration platforms such as n8n, GitH