Security Engineer - Identity & IaC (Cloud Drift Management)

At Metcash, you’re part of something bigger. We’ve got the heart of a small business with the strength and support of a big business. When you join Metcash, your work makes a real difference to independent businesses and local communities, empowering you to:

• Grow your career with tailored development programs


• Make your mark in a high-performing, values-led team


• Thrive your way with flexible work options

About the Opportunity

At Metcash, we're transforming how technology is built, secured and managed. As we move towards an environment governed entirely through Infrastructure as Code (IaC), we're looking for an experienced Security Engineer to help lead that journey.

If you're passionate about Identity Security, DevSecOps, Cloud Automation and Microsoft technologies, this is an opportunity to work on cutting-edge security engineering initiatives that directly protect one of Australia's leading wholesale distribution businesses.

You'll join a highly skilled Security Operations team where you'll build secure-by-design solutions, automate infrastructure, eliminate configuration drift and embed security into every stage of the software delivery lifecycle.

In this Role, You Will:

• Build and maintain Infrastructure as Code using Terraform, Bicep and Microsoft365DSC


• Develop automated CI/CD pipelines in Azure DevOps using YAML


• Detect, investigate and remediate Cloud & Microsoft 365 configuration drift


• Engineer secure identity solutions across Microsoft Entra ID, Conditional Access, SSO, OAuth and MFA


• Embed security directly into development pipelines using GitHub Advanced Security


• Secure secrets and certificates through Azure Key Vault


• Automate security processes using PowerShell, Python and Graph APIs


• Improve monitoring, observability and incident response across cloud and identity platforms


• Work closely with Security Architects, DevOps and Infrastructure teams to continuously improve Metcash's security posture

You’ll bring:

• Infrastructure as Code (Terraform, Bicep, DSC andARM)


• Microsoft365DSC and Desired State Configuration


• Azure DevOps CI/CD pipelines using YAML


• Microsoft Entra ID and Microsoft 365 administration


• Conditional Access, OAuth, SSO and MFA


• PowerShell and Python automation


• Azure Key Vault, certificates and PKI


• GitHub Advanced Security and Secure SDLC practices


• Azure governance, Policy-as-Code and cloud security best practices

What’s on Offer
️ Extra Leave: 5th week of annual leave, 2 well-being days, 1 volunteer day
Career Growth: Endless learning and development opportunities
Parental Leave: 12 weeks of gender-neutral paid leave for primary carers
Inclusive Culture: Bronze Employer for LGBTQ Inclusion
⚖️ Neutral Pay Gap: Gender pay gap under 5% (WGEA 2024–2025)
Mental Health: Gold accreditation by Mental Health Australia
Flexibility: Flex Ready and Family Friendly Workplace accredited

About Us

Metcash is Australia’s leading wholesale distribution company, with $19.5 billion in sales (FY25) and a proud spot in the ASX Top 125. We believe in the power of independent, family-owned businesses to shape vibrant communities. Through our food, liquor, and hardware pillars, we help retailers become the ‘Best Store in Their Town’ by providing merchandising, operational and marketing support.
We’re committed to diversity, inclusion, and sustainability - and we welcome applicants from all backgrounds, including First Nations. If you need support during the application process, just let us know. Your privacy and dignity are always respected.

Join us and be part of something bigger!

#INFLA

#LI-SS1