Job Description

Optus is an Australian telecommunications company, delivering more than 11 million services to our customers every day across mobile, broadband and digital solutions.

The Security Platform Engineer - Secrets Management is responsible for operating and enhancing Optus' enterprise secrets management and tokenisation platform. The role focuses on reducing security risk by eliminating hardcoded credentials, enabling secure access to secrets through automated platforms, and providing tokenisation capabilities to protect sensitive data across applications.

As part of the Workforce Identity and Access Management (IAM) team, the engineer works closely with Cloud and Application Security teams to integrate security capabilities into developer tools and CI/CD pipelines. The role is ideal for someone passionate about security automation, platform engineering, and simplifying secure development practices at enterprise scale.

WHAT YOU’LL DO

Secrets Management Platform Engineering and Operations

• Build, manage, and optimise the enterprise secrets management platform, ensuring secure, reliable, and scalable service delivery.
• Implement dynamic secrets, enforce controls to prevent hardcoded credentials, and drive secure credential management across applications and pipelines.
• Support application onboarding, lead migration of high-risk repositories, and measure platform adoption and security outcomes.

Tokenisation Platform Engineering

• Build, operate, and maintain tokenisation capabilities that securely protect sensitive data while ensuring high performance and reliability.
• Deliver reusable APIs, libraries, and integration patterns that make tokenisation easy to adopt, while supporting application teams through onboarding and implementation.

Developer Enablement and Engineering Community Adoption

• Develop engineering standards, documentation, and self-service tools to drive adoption of secrets management and tokenisation across engineering teams.
• Partner with security and engineering teams to embed platform capabilities into developer workflows, provide SME support, and track adoption

Platform Automation and Reliability Engineering

• Develop and maintain automation, infrastructure-as-code, monitoring, and disaster recovery capabilities to ensure a secure, scalable, and resilient platform.
• Automate secrets lifecycle management, compliance reporting, and platform observability to improve governance, reduce risk, and provide visibility into security outcomes.

WHAT MAKES YOU PERFECT FOR THE ROLE?

• Relevant technical background with a degree in Computer Science, Engineering, Information Security, or equivalent experience, plus 3+ years in platform, DevOps, or security engineering.
• Secrets management expertise, including vault administration, dynamic secrets, credential rotation, authentication methods, and policy management.
• DevSecOps and CI/CD experience, integrating security controls, secrets scanning, and automated credential protection into development pipelines.
• Automation and Infrastructure-as-Code skills, using Python, Bash, and IaC tools to streamline platform operations, compliance, and provisioning.
• Application and security integration knowledge, covering API authentication, credential management, tokenisation, and secure secrets consumption patterns.
• Strong stakeholder and developer enablement skills, with a collaborative, automation-first mindset and the ability to drive adoption of secure engineering practices across teams.

WHAT’S IN IT FOR YOU?

• Competitive remuneration and employee discounts. Make life easier (and more affordable) with $80 monthly credit and 25% off Optus products and unique shopping discounts with our retail partners.
• Flexible working arrangements with opportunities to work three days in the office, two days remote or home.
• Competitive leave policies, including additional 'Connected’ days to focus on culture, family, health, community, or whatever’s important to you.
• We support growing families with inclusive, carer-neutral paid Parental Leave of up to 16 weeks.
• Build meaningful connections through employee-led networks and diversity initiatives including Culture Connect, Elevate Women, Disability Network and Express Yourself (LGBTQIA+).
• Put your wellbeing first with free access to counselling and support services, 24/7 — in-person, by phone, SMS, or video.

At Optus, we are strengthened by others and that means valuing diversity and saying ‘yes’ to embracing individual differences. We are committed to ensuring that our application process provides an equal employment opportunity to all job seekers, including individuals from diverse gender, cultural and linguistic backgrounds, individuals with a disability, individuals identifying as being part of the LGBTQIA+ community, individuals who may have served in the armed forces or who identify as Aboriginal and/or Torres Strait Islander. We also want to do our best to make our recruitment process inclusive. If you require any adjustments or accessibility support to participate fairly and equitably in the recruitment process, please email AccessibleRecruitment@optus.com.au or call 1800 309 170. We're here to help. When you contact us, please advise your preferred method of contact and we will be in touch within 48 hours.

For more information on Diversity, Inclusion & Belonging at Optus, please visit https://www.optus.com.au/about/inclusion-diversity