Senior Cloud Security Engineer

About us At Southern Cross Travel Insurance (SCTI), we’ve got your back in the moments that matter. We are part of the Southern Cross group of brands which all focus on wellbeing. This means we support our people to do and be their best every day. SCTI is proud to be the market leader in New Zealand and growing in Australia, and we’re just getting started. Travel is changing, and so are our customers’ needs. That’s why we’re here with real care, reassurance, and smart solutions to keep people moving confidently. We’re travellers at heart, and we bring that spirit into everything we do - innovating, improving, and going further together. Our culture is inclusive and values driven. We empower our people to make decisions, share ideas, and succeed. When you join SCTI, you’re joining a team that’s passionate about creating extraordinary outcomes for our customers and for each other. About the role: This is an opportunity to take the lead on cloud security in an organisation where security matters and the foundations are already in place. As our Senior Cloud Security Engineer, you’ll combine strategic influence with hands-on engineering to design, operate and continually improve security across Microsoft Azure, Microsoft 365 and AWS. You’ll have the scope to shape how we work, embed secure-by-design practices and strengthen security across our cloud platforms, identity controls, infrastructure as code and monitoring. Just as importantly, you’ll turn complex technical risks into clear, practical insights that help our leaders make informed decisions. Key responsibilities: Design and continually improve secure, resilient cloud controls across Microsoft Azure, Microsoft 365 and AWS. Embed Zero Trust, least-privilege, encryption, data protection and secure-by-design principles across our platforms. Build and secure infrastructure as code using Terraform, and integrate automated security controls into CI/CD and cloud deployment processes. Strengthen identity and access security across Microsoft Entra ID, Conditional Access, privileged access, identity governance and cloud permissions. Improve security monitoring, alerting and detection so material threats and control failures are identified and addressed quickly. Provide senior technical leadership during cloud security incidents, from investigation and containment through to practical improvement. Support ISO/IEC 27001 certification, regulatory obligations and internal and external assurance activities with clear technical evidence. Assess platform changes, emerging threats and new security capabilities, focusing on improvements that deliver meaningful outcomes. Work closely with technology teams, Risk and Compliance, external security providers, auditors and technology partners. Translate technical risks, trends and security measures into straightforward reporting for non-technical leaders and the Board. About you: You’ll be an experienced cloud security professional who enjoys staying close to the technology while taking ownership of the bigger security picture. You communicate clearly, build trust across technical and non-technical teams, and bring a pragmatic approach that balances security, operational needs and customer outcomes. Strong hands-on experience securing Microsoft Azure and Microsoft 365 environments. Practical knowledge of Microsoft Entra ID, Conditional Access, PIM, Defender and Purview. Experience building, reviewing or securing infrastructure as code using Terraform. Knowledge of CI/CD, DevSecOps, security automation and secure cloud deployment practices. Experience with security monitoring, SIEM or XDR, incident investigation and response. Working knowledge of cloud identity, Zero Trust, IAM/PAM, vulnerability management, secrets management and data protection. The ability to explain complex security risks clearly and practically to senior and non-technical audiences. Sound judgement, curiosity and the confidence to own complex issues through to resolution. A collaborative approach to working with engineering teams, stakeholders, vendors and external security partners. A relevant qualification, certification or equivalent experience in cloud engineering or cyber security. Experience with AWS security, Cloudflare, Microsoft Sentinel, advanced Purview capabilities, scripting, ISO/IEC 27001 or regulated environments would be valuable. Why you’ll love working with us We believe work should fit around life, not the other way around. When you join SCTI, you’ll enjoy perks that make a real difference for you and your whānau: Health and wellbeing first - fully subsidised medical insurance for you and your immediate family Travel and pet perks - discounted travel and pet insurance, plus special deals for your whānau Family-friendly benefits - extra parental leave benefits when it matters most Peace of mind - life and terminal illness insurance Time for you - five days of wellbeing leave every year, plus the option to buy extra flexi-leave Flexibility that works - hybrid working options so you can work from home part of the week Because when we say we’ve got your back, we mean it - at work and in life. Our commitment to diversity Just like the places our customers travel to, our people are wonderfully diverse. We’re committed to creating an inclusive culture where every voice is heard and every perspective is valued. Applications are welcome from individuals of all backgrounds, experiences, and walks of life. Want to apply? If you’re ready to take ownership of cloud security and shape what comes next, we’d love to hear from you. If this sounds like you, we’d love to hear from you. Please send us your CV and cover letter. Applicants for this position must meet legal requirements to work in New Zealand.