Senior Software Engineer – Identity

Work with cutting edge technology, making the world a safer and more secure place. DroneShield (ASX:DRO) offers an opportunity to solve some of world's most challenging technical problems in the Electronic Warfare, Artificial Intelligence and Machine Learning, RF sensing, Sensor Fusion and distributed systems. Working with high profile customers across militaries, government agencies, airports, critical infrastructure, law enforcement and many others.

With one of the largest listed defence company market capitalisations in Australia and having raised approximately $250m in 2024 alone, DroneShield is undergoing hypergrowth stage, fuelled by rapidly increasing use of drones for nefarious applications, from battlefield, to terrorism, to contraband delivery and commercial espionage.

This role is in the DroneShield Sydney headquarters in Sydney CBD. There are approximately 390 staff based in the 4,000sqm facility today, scheduled to grow to approximately 500 staff by end of 2026. Overseas on the ground presence includes Virginia (USA), Denmark, Germany and Dubai, as well as distributors in over 70 countries globally.

About the role

DroneShield is seeking a Senior Software Engineer – Identity & Access with relevant experience to join the Security team in Sydney, NSW.

The Security team is a nimble team responsible for protecting DroneShield's assets and users. Our adversaries are sophisticated and use state-of-the-art tooling. To protect DroneShield, we need to focus on the biggest risks, eliminate threats, focus on automation to scale our efforts and continually increase the cost for the attackers.

Key responsibilities for this role include working with our IT and Platforms teams to ensure strong authentication mechanisms and Privileged Identity Management for users, services and devices. Additionally, working with the Product teams to enhance authentication into our products, including our air-gapped hardware products.

Be a core contributor of the ZeroTrust strategy and an advocate for change.

The ideal candidate will have strong communication skills, being a hands-on engineer and will have a systemic view of the problem space focusing on solving the biggest problems and designing solutions that can scale.

They also should have a strong background in computer science, demonstrated experience in developing and maintaining backend systems in high-stakes environments, and technical expertise in authentication and authorisation protocols (OAuth, SAML, etc).

Strong communication skills and being a hands-on engineer are a must have.

Responsibilities, Duties and Expectations

• Automate access requests for internal staff for EntraID and SaaS apps
• Design and build just-in-time access for privileged actions
• Design and implement robust audit logging for internal applications
• Influence and review identity designs from engineering teams
• Manage multiple concurrent projects and solve cross-product problems

Qualifications, Experience and Skills

• BS degree in Computer Science, Information Technology or similar technical field of study or equivalent practical experience.
• Demonstrated experience working in software engineering roles
• On-the-tools engineering experience – must be hands-on
• Minimum 5 years' experience in related roles. Roles could include:
• • Security Engineer
• Identity and Access Engineer
• Software Engineer
• Knowledge of the following is essential:
• • Strong programming experience with Go or Python
• Modern app security and application architectures
• Experience with infrastructure as code and containers
• Comfortable on the command line in a Linux first environment
• Knowledge of authentication, authorisation and cryptographic protocols
• Knowledge of the following would also be desirable:
• • Strong problem-solving and analytical skills.
• Ability to think creatively to identify potential security vulnerabilities.
• Systems thinking: focus on design solutions that improve the system
• Excellent communication skills to explain complex technical concepts.

Note for recruitment agencies: We do not accept unsolicited candidates from external recruiters unless specifically instructed.