Principal Engineer, Platform & Security

About the role

Stuff is looking for a Principal Engineer to own and evolve the platform that powers its digital experiences for millions of New Zealanders. You will define the Golden Path for software delivery, embed security at every layer, and shape platform strategy across the organisation.

Key responsibilities

• Own and continuously improve the Golden Path for software delivery, balancing developer experience, reliability, security and cost.
• Lead cloud infrastructure, CI/CD and Infrastructure as Code initiatives using Terraform, Kubernetes and related technologies.
• Embed DevSecOps practices, automated security controls and policy enforcement into engineering workflows.
• Define and enforce identity and access management standards, including OAuth, OpenID Connect and role‑based access controls.
• Improve observability, resilience and operational excellence across the platform.
• Mentor engineers, influence architecture decisions and raise engineering capability across teams.
• Build security capability across engineering teams to reduce single‑point‑of‑knowledge risk.

Required profile

• Extensive senior‑level experience in platform engineering, DevOps, cloud infrastructure or security leadership.
• Hands‑on experience designing zero‑trust network architecture, service mesh and application security controls at scale.
• Proven ability to lead through influence, coach engineers and drive technical excellence across multiple teams.

Required skills

• Terraform
• Kubernetes
• CI/CD pipelines
• Infrastructure as Code (IaC)
• OAuth
• OpenID Connect
• Role‑Based Access Control (RBAC)
• Zero‑trust network architecture
• Service mesh
• Application security controls
• Cloud platforms (e.g., AWS, Azure, GCP)
• Security frameworks such as ISO 27001 and PCI DSS

What we offer

• Opportunity to shape the engineering foundations of a leading New Zealand media company.
• Collaborative environment that values inclusion, diversity and continuous learning.
• Impactful work at the intersection of platform engineering, cloud infrastructure and security.