Security Engineer (Enterprise Identity)

XeroYesterday

Location

NZ: Wellington: Xero One (19-23 Taranaki St)

Type

Full Time

Salary

NZD 110,000 – 145,000

Level

Mid

Role

Security Engineer

Posted

Mar 17, 2026

Full TimeMid

The role

Summary

A hands-on Security Engineer role at Xero focusing on enterprise identity management, responsible for operating and improving workforce identity platforms across the organization. The ideal candidate will develop automated identity services, manage secure remote access infrastructure, and contribute to maintaining robust, scalable identity systems using cloud and automation technologies.

What you'll do

Identity Platform Management: Administer and support core identity platforms including Okta, Active Directory, and Duo Security

Identity Tooling Development: Develop and maintain internal identity tooling and automation using AWS services like Lambda, S3, and CodePipeline

Remote Access Infrastructure: Manage secure remote access infrastructure including Windows Bastions and Session Manager

Automation and Scripting: Write and refine code in Python and PowerShell to automate workforce identity lifecycles and bot integrations

Security Collaboration: Work closely with Xero Security and Production Platform teams to resolve complex incidents and maintain platform integrity

What we look for

Technical

Programming LanguagesProficiency in Python and PowerShell for scripting and automation

Cloud PlatformsExperience with AWS services, particularly Lambda, S3, and CodePipeline

Identity Management ToolsHands-on experience with Okta, Active Directory, and Duo Security

Education

Relevant DegreeDegree in Computer Science, Cybersecurity, or related technical field preferred

Experience

DevOps PracticesUnderstanding of DevOps and Agile methodologies

System AdministrationBasic understanding of network and system administration security

Skills

Required skills

Identity and Access ManagementStrong skills in workforce IAM, enterprise SSO, and directory services

Cloud SecurityExperience in securing cloud-based infrastructure and identity platforms

Nice to have

Scripting AutomationAdvanced skills in creating sophisticated automation scripts

Collaborative Problem SolvingAbility to work in cross-functional teams and mentor colleagues

Compensation & benefits

Salary

NZD 110,000 – 145,000 (annual)

Benefits

Flexible Work Arrangement

Hybrid work model with location flexibility across New Zealand

Professional Development

Opportunities for mentorship and continuous learning

Diverse Work Environment

Collaborative team culture that respects and challenges employees

Interview process

1
Initial Screening — Resume and background review
2
Technical Interview — Assessment of identity management and security skills
3
Team Interview — Collaborative discussion to evaluate cultural fit and problem-solving approach
4
Final Selection — Comprehensive evaluation of skills, passion, and potential contribution