Senior Software Engineer, Cloud Platform
Airwallex
Job Description
About the TeamWe are the Cloud Platform Engineering team, responsible for the infrastructure systems that give the entire organization visibility and control over its cloud resources. We build two critical platforms:Cloud Cost Management Platform — a billing and cost attribution system that tracks GCP spend across all departments, enables cross-department chargeback, and provides the data foundation for cost optimization across $30M+ in annual cloud spend.Security & Access Platform — a zero-trust access control system covering Just-In-Time (JIT) access, Attribute-Based Access Control (ABAC), and self-service credential management for all production GCP environments and CI/CD pipelines.Our work directly impacts engineering productivity, cost governance, and the security posture of the entire company. What You'll BuildCost & Billing PlatformDesign and build a multi-level billing and cost attribution pipeline that ingests raw GCP billing data and distributes costs across business units, departments, and feature teamsBuild the billing dashboard — a self-serve cost reporting system used by all department leads across the organizationDevelop anomaly detection and alerting for abnormal cloud usage patternsBuild cost optimization recommendation systems based on utilization signals across GCP resourcesImplement automated resource rightsizing and waste reduction toolingSecurity & Access PlatformImplement and roll out a Just-In-Time (JIT) access request system to replace standing IAM privilegesBuild a self-service credential management system What We're Looking ForMust-Have5+ years of software engineering experience, with at least 2 years building platform or infrastructure toolingStrong backend engineering skills — Go, Python, or JavaHands-on experience with GCP or AWSExperience designing and building data pipelines or backend services that process and aggregate large datasetsSolid understanding of cloud security principles: IAM, RBAC/ABAC, least-privilege access, secrets managementComfortable owning a project end-to-end: design → implementation → rollout → monitoringNice to HaveExperience building cost management, FinOps, or billing systemsExperience with access control systems (JIT, PAM, ABAC/RBAC frameworks)Familiarity with HashiCorp Vault or similar secrets management platformsGitLab CI/CD administration experience, including runner securityExperience with Kubernetes resource management, autoscaling, or rightsizing tooling (e.g.
ScaleOps, VPA)Prior work in a platform engineering or DevOps/SRE team