DevOps and SecOps Engineer

Company DescriptionOVERVIEW OF SMILING MINDSmiling Mind has been at the forefront of mental wellbeing innovation for over 12 years, helping minds thrive with evidence-based tools and resources. We’re proud to have impacted the lives of millions of people globally.Our mission is Lifelong Mental Fitness. We aim to create generational change in mental health, providing proactive tools and programs that help every mind thrive. So far, we’ve reached more than 8.6 million people through our renowned mental fitness app and more than 12.8 million young people through our app and school-based programs - but this is just the beginning.Job DescriptionROLE OVERVIEWThis is a hands-on DevOps and SecOps engineering role, focused on building secure, scalable, and maintainable infrastructure across our AWS environments. You’ll work closely with our development and data teams to enable reliable deployment, rigorous automated processes, and improved monitoring.We’re looking for a technically strong, collaborative engineer who thrives in startup-like environments and is motivated by impact.Key ResponsibilitiesDevOps & Platform EngineeringMaintain and improve Infrastructure as Code (Terraform) for AWS networking, compute, storage, IAM, and backups. Ensure robust CI/CD pipelines are in place across app and backend services (Bitbucket Pipeline preferred actions preferred). Manage environment provisioning, secrets management, and artefact registries. Assist in the delivery and automation of secure environments aligned to the Well-Architected Framework. Data Infrastructure SupportCollaborate with the data team to stabilise and modernise pipelines for app usage data, CRM (Hubspot), surveys (Qualtrics), and backend systems. Participate in incident detection and response as it relates to data flows and reliability. SecOps & Cybersecurity EnablementMaintain logging, audit, and alerting infrastructure (AWS GuardDuty, CloudWatch, GCP SCC, etc.). Coordinate and document penetration tests, including scope setup, vendor coordination (e.g. Bugcrowd), and remediation tracking. Ensure cyber-related roadmap actions are maintained: backups, key rotation, policy translation, retention workflows, and incident runbooks. Support ST4S hardening work and National Mental Health Digital Standards evidence collection. Contribute to secure SDLC practices and threat modelling for platform changes. QualificationsTechnical RequirementsStrong experience with AWS cloud services (VPC, EC2, Lambda, S3, RDS, IAM, CloudWatch, etc.). Competence with Infrastructure as Code (Terraform). CI/CD tooling experience (preferably Bitbucket Pipeline). Familiarity with containerisation and Docker (ECS preferred). Working knowledge of cybersecurity controls and secure deployment practices. Experience with basic monitoring and alerting tools (e.g. Bugsnag, Sentry). Comfortable using logging and audit systems across multi-cloud environments. Understanding of the penetration testing lifecycle and mitigation coordination. Exposure to regulated environments or standards (e.g. ST4S, ISO 27001, NIST, SOC 2) is a bonus. Mindset And CapabilitiesStrong attention to detail, especially around systems hygiene and data handling. Collaborative, respectful, and calm under pressure - able to work closely with developers, data teams, and non-technical colleagues. Supportive team player who enjoys understanding problems as well as defining solutionsCurious and adaptable: you're not afraid to ask questions, learn on the job, and find pragmatic solutions. Additional InformationTHE VALUES WE LIVE BY AT SMILING MIND100% People-first: We are dedicated to creating impact with people at the centre of everything we do. Changemakers: We challenge the status quo and pave new paths towards helping every mind thrive. Curious: We ask questions and we strive to keep learning and improving. Intentional: We know action is required to achieve our goals, and we’re purposeful in every action we take. We Love People Who HaveA belief in the purpose and philosophy of Smiling Mind - that we can achieve generational change in mental health by focusing on building mental fitness skills in young people and the adults that surround themA desire to have a positive impact on the world – particularly through behaviour change and learning designThe ability to blend agility and pace, with the rigour required to deliver impactful health servicesA growth mindset and willingness to learnAttention to detail, accountability, and ability to work to timelines and manage competing tasksA warm, friendly, collaborative, and engaging approach Alignment with our values We're a friendly and highly driven small team with a big dream, so expect to be surrounded by people who are passionate about changing the future generations of Australians. 'Smart Hustle' is a state of mind in a not-for-profit, but we are certainly not your standard. Smiling Mind is a high-growth, fast-paced organisation more akin to a tech start-up than what you might perceive a not-for-profit to be like.Our people have tenacity, creativity, and resilience in spades, meaning we punch well above our weight, working together as a tight-knit team to achieve great things.You will be supported to succeed, but encouraged to use initiative to get the job done, will be challenged to perform at your very best, and in return, get the opportunity to learn from inspiring and skilled team members achieving life-changing results for our community.Other perks include a hybrid work environment, your birthday off each year, planned development days each quarter, salary sacrificing and a Collingwood-based warehouse office, which is most definitely dog-friendly.Smiling Mind is a child safe organisation and is committed to ensuring the safety and wellbeing of all children, at all times. All offers of employment are subject to satisfactory background checks including, but not limited to, Working with Children Check and Referee Checks.All employees are required to adhere to Smiling Mind's Code of Conduct, Policies & Procedures, and relevant Clinical & Technical Governance frameworks. Additionally, all activities must comply with the National Digital Mental Health Standards to ensure safe, ethical, and high-quality service delivery and operational integrity.We are committed to creating a workplace that promotes mutual learning, respect, dignity, cultural openness and an appreciation of differing perspectives and backgrounds. We encourage applications from all people regardless of age, gender, ethnicity, cultural background, or sexual orientation. It is our goal that Smiling Mind continues to evolve as a culturally safe and welcoming organisation to Aboriginal and Torres Strait Islander children, young people, families, and communities. Aboriginal and Torres Strait Islander people are encouraged to apply for this position.