" \u003cdiv class=\"ja-job-details\"\u003e \u003ch2 class=\"title\"\u003ePrincipal Security Engineer - Application Identity\u003c/h2\u003e \u003cdiv class=\"meta\"\u003e \u003cul class=\"classifications\"\u003e \u003cli data-id=\"20373\"\u003e IT \u0026amp; Engineering \u003c/li\u003e \u003cli data-id=\"20374\"\u003e IT Security \u003c/li\u003e \u003cli data-id=\"20375\"\u003e Sydney \u003c/li\u003e \u003cli data-id=\"20376\"\u003e Permanent / Full Time \u003c/li\u003e \u003c/ul\u003e \u003cp class=\"date-posted\"\u003e 16/10/2026 \u003c/p\u003e \u003c/div\u003e \u003cdiv class=\"description\"\u003e \u003cstrong\u003eAbout Us:\u0026nbsp;\u003c/strong\u003e\u003cbr\u003e \u0026nbsp;\u0026nbsp;\u003cbr\u003e At Ubank, we empower the digital generation to achieve financial success. Think of us as your daily money companion, offering a unified view of your finances with smart features and real-time insights. Save more, track spending, and achieve home ownership faster with Ubank.\u0026nbsp;\u0026nbsp;\u003cbr\u003e \u0026nbsp;\u0026nbsp;\u003cbr\u003e \u003cstrong\u003eThe Why:\u0026nbsp;\u0026nbsp;\u003c/strong\u003e\u003cbr\u003e\u003cbr\u003eThe \u003cstrong\u003ePrincipal Security Engineer (Application \u0026amp; Identity)\u003c/strong\u003e is the senior technical authority for application security and identity architecture across a modern digital bank\u0027s customer-facing products. This role designs and builds reusable security patterns, reference implementations, and middleware that make the secure path the easy path for every product squad \u0026ndash; spanning customer authentication, service-to-service authorisation, payment-rail integrations, and vendor federation. \u003cbr\u003e\u003cbr\u003eWorking as an embedded engineering partner within product tribes, this role holds binding decision authority on security architecture for new integrations and auth flows, and is accountable for continuously hardening the identity landscape within a regulated, cloud-native environment.\u003cbr\u003e\u003cbr\u003e\u0026nbsp;\u0026nbsp;\u003cbr\u003e \u003cstrong\u003eKey Responsibilities:\u0026nbsp;\u0026nbsp;\u003c/strong\u003e\u003cbr\u003e\u003cbr\u003eSecurity Architecture \u0026amp; Engineering\u003cbr\u003e \u003cul\u003e \u003cli\u003eDesign and build production security patterns, middleware, and reference implementations that make secure defaults the path of least resistance for product squads\u003c/li\u003e \u003cli\u003eDefine binding security architecture decisions for authentication flows, service authorization, and third-party integrations \u0026ndash; with clear escalation paths where trade-offs exist\u003c/li\u003e \u003cli\u003eBuild and maintain reusable threat models, security building blocks, and integration patterns that reduce time-to-production for new features and partnerships\u003c/li\u003e \u003c/ul\u003e Identity \u0026amp; Authentication\u003cbr\u003e \u003cul\u003e \u003cli\u003eLead the technical strategy for customer authentication and credential lifecycle \u0026ndash; evolving toward phishing-resistant, modern identity standards\u003c/li\u003e \u003cli\u003eDesign service-to-service authorisation architecture ensuring least-privilege, auditability, and resilience across the microservices landscape\u003c/li\u003e \u003cli\u003eEstablish certificate management, mTLS, and API security patterns for external partner and payment-rail integrations\u003c/li\u003e \u003c/ul\u003e Embedded Partnership \u0026amp; Influence\u003cbr\u003e \u003cul\u003e \u003cli\u003ePartner directly with product tribes during design and delivery \u0026ndash; providing security architecture guidance as an embedded engineering collaborator, not an external gate\u003c/li\u003e \u003cli\u003eCoach and enable squads to conduct threat modelling and apply security patterns independently, scaling security decision-making beyond the security team\u003c/li\u003e \u003c/ul\u003e Pattern Library \u0026amp; Secure Defaults\u003cbr\u003e \u003cul\u003e \u003cli\u003eBuild and curate a living security pattern library covering identity, integration, and data protection \u0026ndash; ensuring patterns stay current as the threat landscape evolves\u003c/li\u003e \u003cli\u003eDefine quality gates for security patterns, measuring adoption, effectiveness, and coverage across the engineering organisation\u003c/li\u003e \u003c/ul\u003e Continuous Hardening \u0026amp; Risk Reduction\u003cbr\u003e \u003cul\u003e \u003cli\u003eEnsure the identity architecture is continuously hardened through automated validation, least-privilege reviews, and proactive elimination of privilege escalation paths\u003c/li\u003e \u003cli\u003eLead security incident response for application and identity domains \u0026ndash; conducting root cause analysis and translating findings into preventive engineering controls\u003c/li\u003e \u003c/ul\u003e Governance \u0026amp; Regulatory Alignment\u003cbr\u003e \u003cul\u003e \u003cli\u003eEnsure application security and identity controls satisfy APRA CPS 234 obligations through engineering implementation rather than compliance documentation alone\u003c/li\u003e \u003cli\u003eProvide technical evidence and architectural artefacts that demonstrate control effectiveness to internal and external audit functions\u003c/li\u003e \u003c/ul\u003e \u0026nbsp;\u0026nbsp;\u003cbr\u003e \u003cstrong\u003eYour Experience:\u0026nbsp;\u0026nbsp;\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003e10+ years of hands-on security engineering experience, with at least 4 years focused on application security, identity architecture, or authentication platforms in complex distributed systems.\u003c/li\u003e \u003cli\u003eDemonstrated experience designing and implementing production identity systems \u0026ndash; customer-facing authentication, service mesh authorisation, certificate lifecycle management, or API security at scale.\u003c/li\u003e \u003cli\u003eProven track record of creating reusable security patterns, libraries, or frameworks that engineering teams adopted to eliminate recurring vulnerability classes without requiring ongoing consultation.\u003c/li\u003e \u003cli\u003eAt least 3 years operating in environments with significant third-party integration complexity \u0026ndash; payment processors, data providers, or financial services partners requiring mTLS, OAuth federation, or certificate-based trust.\u003c/li\u003e \u003cli\u003eExperience in a regulated financial services, fintech, or payments environment (APRA, PRA, FCA, OCC, or equivalent) is highly desirable.\u0026nbsp;\u003c/li\u003e \u003c/ul\u003e Candidates would able to bring in:\u003cbr\u003e \u003cul\u003e \u003cli\u003eProduction identity platform engineering (OIDC, SAML, FIDO2, passkeys)\u003c/li\u003e \u003cli\u003eThreat modelling and secure design embedded in delivery squads\u003c/li\u003e \u003cli\u003eSecurity pattern libraries adopted org-wide\u003c/li\u003e \u003cli\u003emTLS, certificate lifecycle, and API gateway security\u003c/li\u003e \u003cli\u003ePayment-rail and third-party integration security architecture\u003c/li\u003e \u003cli\u003eZero-trust and least-privilege architecture in containerised environments\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eWhy Ubank?\u0026nbsp;\u003c/strong\u003e\u0026nbsp;\u003cbr\u003e \u003cul\u003e \u003cli\u003eInnovation with impact:\u0026nbsp;From meaningful work to amazing benefits, we equip you with the tools and support to drive real change - so your ideas\u0026nbsp;don\u0026rsquo;t\u0026nbsp;just stay ideas, they become impact.\u0026nbsp;\u003c/li\u003e \u003cli\u003eCollaborative,\u0026nbsp;supportive\u0026nbsp;\u0026amp; fun:\u0026nbsp;We believe innovation is a team sport. It comes from a special kind of culture\u0026nbsp;that\u0026rsquo;s\u0026nbsp;highly collaborative and gives people the support they need to thrive.\u0026nbsp;\u003c/li\u003e \u003cli\u003eBuild something great:\u0026nbsp;Ubank is where ambition meets opportunity. We\u0026nbsp;don\u0026rsquo;t\u0026nbsp;just talk about change - we give you the tools, trust, and support to make it happen.\u0026nbsp;\u003c/li\u003e \u003cli\u003eFreedom to be yourself:\u0026nbsp;We celebrate individuality and give you the flexibility to work in ways that suit your style. Our hybrid working model lets you balance connection and autonomy.\u0026nbsp;\u003c/li\u003e \u003cli\u003eAccelerate your Career:\u0026nbsp;With clear paths for career development, your potential\u0026nbsp;won\u0026rsquo;t\u0026nbsp;just be\u0026nbsp;recognised,\u0026nbsp;it\u0026rsquo;ll\u0026nbsp;be accelerated.\u0026nbsp;\u003c/li\u003e \u003c/ul\u003e \u0026nbsp;\u0026nbsp;\u003cbr\u003e We acknowledge the Traditional Custodians of our local area.\u0026nbsp;\u0026nbsp;\u0026nbsp;\u003cbr\u003e \u0026nbsp;\u0026nbsp;\u003cbr\u003e \u003cstrong\u003eThis Sydney-based permanent role requires Australian or New Zealand citizenship or permanent residency.\u0026nbsp;\u0026nbsp;\u003c/strong\u003e\u0026nbsp;\u003cbr\u003e \u0026nbsp;\u0026nbsp;\u003cbr\u003e We welcome applicants\u0026nbsp;of\u0026nbsp;all backgrounds, and our Talent team is excited to\u0026nbsp;connect with\u0026nbsp;you.\u0026nbsp;\u0026nbsp;\u0026nbsp;\u003cbr\u003e \u0026nbsp;\u0026nbsp;\u003cbr\u003e Apply now with your CV and explore this exciting opportunity!\u0026nbsp;\u003cbr\u003e \u0026nbsp;\u0026nbsp;\u003cbr\u003e Please note,\u0026nbsp;we\u0026rsquo;re\u0026nbsp;not accepting unsolicited candidate submissions from recruitment agencies. We\u0026nbsp;work\u0026nbsp;with a dedicated panel of partners, so kindly ask agencies not to contact Ubank team members directly. \u003c/div\u003e \u003cdiv class=\"apply\"\u003e \u003ca class=\"back-link\" href=\"#\" title=\"Back to search results\"\u003eBack to search results\u003c/a\u003e \u003cinput type=\"button\" class=\"ja-button\" data-job-id=\"931210\" value=\"Apply Now\" title=\"Apply Now\" /\u003e \u003c/div\u003e \u003c/div\u003e "