About the role
ABOUT AIRWALLEX
Airwallex is the AI-native financial operating system for a real-time, intelligent economy. More than 675,000 businesses, including McLaren Racing, Qantas, SHEIN, and TikTok, use us, directly or through our platform partners, to run their financial operations or build and monetize financial products of their own.
We started in Melbourne in 2015 to build the infrastructure global commerce runs on. We're the regulated backbone behind global payments: not by accident, but by design. A decade plus, 85+ licenses, and a financial infrastructure spanning North America, Europe, the Middle East, and Asia-Pacific.
We're co-headquartered in San Francisco and Singapore, with more than 2,700 people across 27 offices. We hire builders with founder-level energy, people who move fast with good judgment, dig in with real curiosity, and make calls from first principles rather than waiting to be told what to do. Read our operating principles https://www.airwallex.com/en-us/operating-principles to see it in full.
HOW YOU'LL MAKE IMPACT
We are the Cloud Platform Engineering team, responsible for the infrastructure systems that give the entire organization visibility and control over its cloud resources. We build two critical platforms:
- Cloud Cost Management Platform — a billing and cost attribution system that tracks GCP spend across all departments, enables cross-department chargeback, and provides the data foundation for cost optimization across $30M+ in annual cloud spend.
- Security & Access Platform — a zero-trust access control system covering Just-In-Time (JIT) access, Attribute-Based Access Control (ABAC), and self-service credential management for all production GCP environments and CI/CD pipelines.
Our work directly impacts engineering productivity, cost governance, and the security posture of the entire company.
You'll help move infrastructure security from reactive issue handling to proactive engineering, building the controls and roadmap needed to make secure ways of working the default.
- Own the infrastructure security roadmap, moving beyond ticket handling to proactive security engineering.
- Establish and enforce security governance across infrastructure by translating security policies into practical technical controls and guardrails.
- Identify abnormal infrastructure and security issues early, investigate root causes, and share learnings through clear internal documentation and technical write-ups.
- Modernise legacy infrastructure and reduce the security and operational risk created by systems that need remediation.