Staff Engineer Cyber Security

BFS - Security Engineer, Technology - Engineering

Our team enables secure service-to-service authentication at enterprise scale. We architect machine identity systems and authentication integration layers across Macquarie, ensuring every service, API, and workload across 31 markets can authenticate securely without human intervention. We design how workload identity integrates with human IAM, cloud platforms, and API gateways to create unified zero-trust architecture.

We are a global financial services group operating in 30 markets with 57 years of unbroken profitability. At Macquarie, you're empowered to shape a career that is fulfilling and creates value. You will bring your insights and expertise to the task at hand and feel supported as you make your own kind of impact for a better future.

What role will you play?

You will build and deliver machine identity and authentication systems at Macquarie through hands on engineering and technical leadership within your squad. You will solve hard problems, implementing workload identity infrastructure that integrates with cloud platforms, API gateways, and service meshes; building identity lifecycle automation that works at scale; delivering authentication solutions that span multiple identity layers. You will write production code, build tooling backed by working prototypes, own technical decisions within your domain, and raise the engineering bar through code review and mentorship.

What you offer

Do you bring the skills and experience that fit the role? Below are the key capabilities we look for:

• Experience building and operating workload identity infrastructure at scale - provisioning, rotating, and revoking identities for services across distributed systems.
• Experience implementing across identity layers: human IAM, application auth (OAuth/OIDC), cloud IAM (AWS/Azure/GCP), and API gateways - making them work together in practice.
• Knowledge of when machine identity should replace secrets, when to use attested identities vs tokens, and how to implement federation; you prove your views with working code and production data.
• Experience shipping production code (Python, Go), reviewing architecture, debugging distributed auth failures, and mentoring engineers; you influence through working systems, not presentations.
• Ability to engage with emerging identity patterns, contribute to internal standards, and bring practical improvements into the team's engineering practices.
• Understanding of identity protocols, JWTs, and signing well enough to build secure identity systems on top.
• Experience in identity lifecycle automation, SPIFFE/SPIRE implementation, HashiCorp Vault operation, service mesh or API gateway auth integration, or open source contributions in identity projects is highly regarded.

We love hearing from anyone inspired to build a better future with us. If you're excited about the role or working at Macquarie, we encourage you to apply.

What we offer

At Macquarie, you're empowered to shape a career that's rewarding in all the ways that matter most to you. Macquarie employees can access a wide range of benefits which, depending on employment type, include:

• 1 wellbeing leave day per year
• Up to 5 additional service bonus leave days per year
• Up to 20 weeks' paid parental leave for primary caregivers, along with 12 days of transition leave upon return to work, and 6 weeks' paid leave for non primary caregivers
• 2 days of paid volunteer leave and donation matching
• Up to 12 months' gender affirmation leave, including 6 weeks' paid leave
• Access to Employee Assistance Program and wellbeing benefits including skin and health checks, and flu vaccinations.
• Access to a wide range of salary packaging options
• Access to a wide range of learning and development opportunities, including reimbursement for professional membership or subscription
• Hybrid and flexible working arrangements, dependent on role
• Reimbursement for work-from-home equipment

About Technology

Technology enables every aspect of Macquarie - for our people, our customers and our communities. We're a global team that is passionate about accelerating the digital enterprise, connecting people and data, building platforms and applications and designing tomorrow's technology solutions.

Our commitment to diversity, equity and inclusion

We are committed to fostering a diverse, equitable and inclusive workplace. We encourage people from all backgrounds to apply and welcome all identities, including race, ethnicity, cultural identity, nationality, gender (including gender identity or expression), age, sexual orientation, marital or partnership status, parental, caregiving or family status, family and domestic violence status, neurodiversity, religion or belief, disability, or socio economic background. We welcome further discussions on how you can feel included and belong at Macquarie as you progress through our recruitment process. To learn more, contact our team.

Our aim is to provide reasonable adjustments to individuals who may need support during the recruitment process and through working arrangements. If you require additional assistance, please let us know in the application process.