Staff Platform Engineer

As a Staff Engineer you will own the engineering and architecture of Culture Amp's foundational Internal Technology platform, treating workforce identity, core enterprise SaaS tenancy, and office network controls as software infrastructure.

In this role you will build a secure, automated, and self-service ecosystem that reduces operational drag, protects the company's control plane, and increases leverage for all Campers. You'll also be accountable for the architectural integrity, and availability of our workforce identity layer, core enterprise platforms, corporate network topology, and infrastructure deployment pipelines.

This is a hands-on engineering role that owns the foundational platform layer, guardrails, and the Infrastructure as Code operating model that underpin our internal tools through GitHub, Terraform, and CI/CD. Routine administration, standard support tasks, and day-to-day operational execution are deliberately delegated to the Workplace Technology team through clear platform boundaries, least-privilege access, and productised run-books.

• Architect, secure and maintain the root configuration, tenancy guardrails and system integrity of our core enterprise platforms, including Okta, Google Workspace, Jamf, Slack, Claude Enterprise and Glean, with clear boundaries between foundational platform ownership and day-to-day administration.




• Design and continuously improve workforce identity, access management, device trust and endpoint controls using Infrastructure as Code, primarily Terraform, and related automation tooling.




• Eliminate ClickOps by managing platform configuration, identity policies and system state through pull requests, tested CI/CD pipelines and approved scripting patterns, with rigorous Git workflows, branch protections and peer review.




• Own the end-to-end identity lifecycle across joiner, mover and leaver workflows, including HRIS-to-identity integrations, provisioning rules, group structures and downstream access patterns.




• Build and productise reusable modules, administrative tooling, standard operating procedures and runbooks so Workplace Technology can safely manage routine support and provisioning without senior engineering intervention.




• Own the baseline architecture of office networks across our Melbourne hub and satellite locations, while partnering with Security, Enterprise Architecture and Automation to deliver compliant, secure platforms and providing technical leadership across Infrastructure & Identity.

• Strong systems-thinking and architecture skills, with the ability to design resilient identity, SaaS and network architectures as an interconnected enterprise control plane.




• Sound judgment in defining platform boundaries between foundational engineering and delegated Workplace Technology operations.




• A strong anti-ClickOps mindset, instinctively favouring code, automation and reusable modules over manual console changes and actively reducing configuration drift and operational risk.




• The ability to turn complex infrastructure into safe tooling, clear runbooks and least-privilege operating models that help others move quickly without compromising control.




• Collaborative technical leadership skills and a player-coach approach, bridging engineering strategy and practical IT operations across Security, Enterprise Architecture, Automation and Workplace Technology.




• A pragmatic approach to security and risk, balancing strong corporate perimeter controls with a seamless, productive experience for Campers.