Principal Engineer, Platform & Security

Build the platform that powers great engineering — and great products.

More than two million Kiwis visit stuff.co.nz every month, and the engineering platform underpinning that experience is evolving fast. We're looking for a Principal Engineer to own that evolution — setting the Golden Path, embedding security at every layer, and building a platform that engineering teams genuinely want to build on.

This isn't a maintenance role. You'll shape platform strategy, drive cloud-native modernisation, and build security capability across the engineering organisation, not just carry it yourself.

What You’ll Do

• Own and evolve our Golden Path for software delivery.
• Drive platform engineering as a product, balancing developer experience, reliability, security and cost efficiency.
• Lead cloud infrastructure, CI/CD and Infrastructure as Code practices using technologies such as Terraform and Kubernetes.
• Embed DevSecOps, automated security controls and policy enforcement into engineering workflows.
• Define identity and access management standards including OAuth, OpenID Connect and role based access controls.
• Improve observability, resilience and operational excellence across the platform.
• Mentor engineers, influence architecture decisions and raise engineering capability across teams.
• Build security capability across engineering teams, reducing single-point-of-knowledge risk.

• Extensive experience in senior platform engineering, DevOps, cloud infrastructure or security leadership roles.
• Hands-on experience designing and implementing zero-trust network architecture, service mesh, and application security controls at scale.
• Deep expertise in cloud platforms, Infrastructure as Code, CI/CD and modern software delivery practices.
• Strong understanding of cloud and application security, secure-by-default design and DevSecOps.
• Experience implementing IAM solutions using OAuth, OpenID Connect and RBAC.
• Knowledge of security and compliance frameworks such as ISO 27001 and PCI DSS.
• A proven ability to lead through influence, coach engineers and drive technical excellence across multiple teams.

You’ll play a pivotal role in shaping the engineering foundations of the organisation, building platforms that accelerate delivery while protecting systems, data and customers.

If you’re passionate about the intersection of platform engineering, cloud infrastructure and security, and want to make a lasting impact across a modern product organisation, we’d love to hear from you.

Think you can do the job? Then apply now and start your journey with Stuff today.

Ka oti rānei i a koe tēnei mahi? Kāti, tono mai ināianei kia tīmata ai tō haerenga me Stuff i tēnei rā.

Stuff champions inclusion. Be it gender, ethnicity, beliefs, abilities or experiences - we know that diversity brings another lens through which we all learn, connect and grow.

E kōkiri nei a Stuff i te whāinga kia whai wāhi ai te katoa. Hāunga te ira, te iwi, ngā whakapono, ngā āheinga, ngā wheako rānei o te tangata - e mōhio nei tātou mā te kanorau e whai tirohanga hou ai, e ako ai, e tūhono ai, e whanake anō ai tātou katoa.

As we are committed to creating a workplace that reflects the diverse communities in New Zealand, we will always invite and encourage applications from people of all genders, ethnicities, disabilities and ages. We are committed to providing equal employment opportunities for all.

Nā runga i tā mātou ū ki tētahi taiao mahi e whakaatu ana i te kanorau o ngā hapori i Aotearoa, i te ao, i te pō, ka pōhiringia, ka ākina anō ngā tono mahi a te marea whānui, hāunga te ira, te iwi, te hauātanga, te pakeke rānei. E ū nei mātou ki te whai kia wātea ai ā mātou ara whai mahi ki te katoa i runga i te mana taurite.

Disclaimer: Stuff does not accept unsolicited agency resumes. Stuff is not responsible for any fees related to unsolicited resumes.