Security Engineer - Identity & IaC (Cloud Drift Management)
Skills
About the role
At Metcash, you’re part of something bigger. We’ve got the heart of a small business with the strength and support of a big business. When you join Metcash, your work makes a real difference to independent businesses and local communities, empowering you to:
Grow your career with tailored development programs
Make your mark in a high-performing, values-led team
Thrive your way with flexible work options
About the Opportunity
At Metcash, we're transforming how technology is built, secured and managed. As we move towards an environment governed entirely through Infrastructure as Code (IaC), we're looking for an experienced Security Engineer to help lead that journey.
If you're passionate about Identity Security, DevSecOps, Cloud Automation and Microsoft technologies, this is an opportunity to work on cutting-edge security engineering initiatives that directly protect one of Australia's leading wholesale distribution businesses.
You'll join a highly skilled Security Operations team where you'll build secure-by-design solutions, automate infrastructure, eliminate configuration drift and embed security into every stage of the software delivery lifecycle.
In this Role, You Will:
Build and maintain Infrastructure as Code using Terraform, Bicep and Microsoft365DSC
Develop automated CI/CD pipelines in Azure DevOps using YAML
Detect, investigate and remediate Cloud & Microsoft 365 configuration drift
Engineer secure identity solutions across Microsoft Entra ID, Conditional Access, SSO, OAuth and MFA
Embed security directly into development pipelines using GitHub Advanced Security
Secure secrets and certificates through Azure Key Vault
Automate security processes using PowerShell, Python and Graph APIs
Improve monitoring, observability and incident response across cloud and identity platforms
Work closely with Security Architects, DevOps and Infrastructure teams to continuously improve Metcash's security posture
You’ll bring:
Infrastructure as Code (Terraform, Bicep, DSC andARM)
Microsoft365DSC and Desired State Configuration
Azure DevOps CI/CD pipelines using YAML
Microsoft Entra ID and Microsoft 365 administration
Conditional Access, OAuth, SSO and MFA
PowerShell and Python automation
Azure Key Vault, certificates and PKI
GitHub Advanced Security and Secure SDLC practices
Azure governance, Policy-as-Code and cloud security best practices
What’s on Offer
️ Extra Leave: 5th week of annual leave, 2 well-being days, 1 volunteer day
Career Growth: Endless learning and development opportunities
Parental Leave: 12 weeks of gender-neutral paid leave for primary carers
Inclusive Culture: Bronze Employer for LGBTQ Inclusion
️ Neutral Pay Gap: Gender pay gap under 5% (WGEA 2024–2025)
Mental Health: Gold accreditation by Mental Health Australia
Flexibility: Flex Ready and Family Friendly Workplace accredited
About Us
Metcash is Australia’s leading wholesale distribution company, with $19.5 billion in sales (FY25) and a proud spot in the ASX Top 125. We believe in the power of independent, family-owned businesses to shape vibrant communities. Through our food, liquor, and hardware pillars, we help retailers become the ‘Best Store in Their Town’ by providing merchandising, operational and marketing support.
We’re committed to diversity, inclusion, and sustainability - and we welcome applicants from all backgrounds, including First Nations. If you need support during the application process, just let us know. Your privacy and dignity are always respected.
Join us and be part of something bigger!
#INFLA
#LI-SS1
Questions about this role
Want AI Applyd to auto-apply to roles like this?
We tailor your resume per posting, fill the forms, and track replies for you.