Senior Software Engineer, Infrastructure (Cloud Governance)

Airwallex is the only unified payments and financial platform for global businesses. Powered by our unique combination of proprietary infrastructure and software, we empower over 250,000 businesses worldwide – including Brex, Navan, Qantas, SHEIN and many more – with fully integrated solutions to manage everything from business accounts, payments, spend management and treasury, to embedded finance at a global scale.

Proudly founded in Melbourne, we have a team of over 2,300 of the brightest and most innovative people in tech across 27 offices around the globe. Valued at US$11 billion and backed by world-leading investors including T. Rowe Price, Visa, Mastercard, Robinhood Ventures, Sequoia, Salesforce Ventures, DST Global, and Lone Pine Capital, Airwallex is leading the charge in building the global payments and financial platform of the future. If you’re ready to do the most ambitious work of your career, join us.

We hire successful builders with founder-like energy who want real impact, accelerated learning, and true ownership. You bring strong role-related expertise and sharp thinking, and you’re motivated by our mission and operating principles. You move fast with good judgment, dig deep with curiosity, and make decisions from first principles, balancing speed and rigor.

You're humble and collaborative; turn zero‑to‑one ideas into real products, and you “get stuff done” end-to-end. You use AI to work smarter and solve problems faster. Here, you’ll tackle complex, high‑visibility problems with exceptional teammates and grow your career as we build the future of global banking. If that sounds like you, let’s build what’s next.

We are the Cloud Platform Engineering team, responsible for the infrastructure systems that give the entire organization visibility and control over its cloud resources. We build two critical platforms:

• Cloud Cost Management Platform — a billing and cost attribution system that tracks GCP spend across all departments, enables cross-department chargeback, and provides the data foundation for cost optimization across $30M+ in annual cloud spend.

• Security & Access Platform — a zero-trust access control system covering Just-In-Time (JIT) access, Attribute-Based Access Control (ABAC), and self-service credential management for all production GCP environments and CI/CD pipelines.

Our work directly impacts engineering productivity, cost governance, and the security posture of the entire company.

Cost & Billing Platform

• Design and build a multi-level billing and cost attribution pipeline that ingests raw GCP billing data and distributes costs across business units, departments, and feature teams

• Build the billing dashboard — a self-serve cost reporting system used by all department leads across the organization

• Develop anomaly detection and alerting for abnormal cloud usage patterns

• Build cost optimization recommendation systems based on utilization signals across GCP resources

• Implement automated resource rightsizing and waste reduction tooling

Security & Access Platform

• Implement and roll out a Just-In-Time (JIT) access request system to replace standing IAM privileges

• Build a self-service credential management system

We're looking for people who meet the minimum qualifications for this role. The preferred qualifications are great to have, but are not mandatory.

• 5+ years of software engineering experience, with at least 2 years building platform or infrastructure tooling

• Strong backend engineering skills — Go, Python, or Java

• Hands-on experience with GCP or AWS

• Experience designing and building data pipelines or backend services that process and aggregate large datasets

• Solid understanding of cloud security principles: IAM, RBAC/ABAC, least-privilege access, secrets management

• Comfortable owning a project end-to-end: design → implementation → rollout → monitoring

• Experience building cost management, FinOps, or billing systems

• Experience with access control systems (JIT, PAM, ABAC/RBAC frameworks)

• Familiarity with HashiCorp Vault or similar secrets management platforms

• GitLab CI/CD administration experience, including runner security

• Experience with Kubernetes resource management, autoscaling, or rightsizing tooling (e.g. ScaleOps, VPA)

• Prior work in a platform engineering or DevOps/SRE team

To protect you from recruitment scams, please be aware that Airwallex will not ask for bank details, sensitive ID numbers (i.e. passport), or any form of payment during the application or interview process. All official communication will come from an @airwallex.com email address. Please apply only through careers.airwallex.com or our official LinkedIn page.

Airwallex does not accept unsolicited resumes from search firms/recruiters. Airwallex will not pay any fees to search firms/recruiters if a candidate is submitted by a search firm/recruiter unless an agreement has been entered into with respect to specific open position(s). Search firms/recruiters submitting resumes to Airwallex on an unsolicited basis shall be deemed to accept this condition, regardless of any other provision to the contrary.

Airwallex is proud to be an equal opportunity employer. We value diversity and anyone seeking employment at Airwallex is considered based on merit, qualifications, competence and talent. We don’t regard color, religion, race, national origin, sexual orientation, ancestry, citizenship, sex, marital or family status, disability, gender, or any other legally protected status when making our hiring decisions. If you have a disability or special need that requires accommodation, please let us know.