Security posture · hardened by design

Brad Murdoch

DevOps & DevSecOps Software Engineer

Cloud security, identity and access management, and Kubernetes on AWS and Azure

DevOps and DevSecOps software engineer with 17 years in production across Tier-1 banking, telecoms, government and gaming in the UK, Ireland, Australia and Asia. I build secure cloud platforms on AWS and Azure: identity and access management, secrets and credential rotation, supply-chain security and threat detection, delivered through Terraform, Kubernetes and GitOps.

ContactGitHubLinkedIn

Education Oxford · London Met

MSc Software Engineering

University of Oxford · 2:1, Upper Second Class

Security

  • Security Principles
  • Network Security
  • Security in Wireless Networks
  • Mobile System Security

Development and implementation

  • Concurrency Oriented Programming
  • Object-Oriented Programming
  • Embedded Software and Systems

Architecture and design

  • Service Oriented Architecture
  • Solution Design Patterns
  • Software Process Quality and Improvement

Foundations

  • Software Engineering Mathematics
  • Database Design
  • Object Oriented Design

Thesis: A System Architecture Design and Implementation for Algorithmic Crop Monitoring (Merit)

BEng (Hons) Software Engineering

London Metropolitan University · First Class Honours

  • Application Development in C# / .NET
  • Advanced Software Engineering
  • Ecommerce Development
  • Software Testing

Thesis: Property vs Crime Index: a big data analytics application

Award

Brad receiving the BCS Best First Class award
Best First Class Award, Software EngineeringBCS, The Chartered Institute for ITLondon Central Branch prize for the best student in Software Engineering at London Metropolitan University.

AWS certifications 5 certified · earned in Brisbane, Australia

AWS Certified DevOps Engineer Professional
DevOps EngineerProfessional
AWS Certified Solutions Architect Associate
Solutions ArchitectAssociate
AWS Certified Developer Associate
DeveloperAssociate
AWS Certified SysOps Administrator Associate
SysOps AdministratorAssociate
AWS Certified Cloud Practitioner Foundational
Cloud PractitionerFoundational

Security, IAM and DevSecOps coverage capability × employer

CapabilityM88Energy QldCBANABTelstraQld GovWestpac
Identity and federation✓✓✓✓
Privileged access and secrets✓✓✓
DevSecOps supply chain✓✓✓✓
Detection and monitoring✓✓
Kubernetes security✓
Infrastructure as code✓✓✓✓✓✓
Identity and federation
Energy QldTelstraQld GovWestpac
Privileged access and secrets
M88Energy QldWestpac
DevSecOps supply chain
M88NABQld GovWestpac
Detection and monitoring
NABTelstra
Kubernetes security
CBA
Infrastructure as code
M88Energy QldCBANABTelstraWestpac

Identity and federation

PingFederate and OAuth2 for Open Banking at Westpac; Azure AD / SAML single sign-on for Queensland Government; Entra ID groups and RBAC at Energy Queensland.

PingFederateOAuth2SAMLEntra IDIAM Identity Center

Privileged access and secrets

Privileged account onboarding and access governance at Energy Queensland; Secrets Manager with credential rotation at Energy Queensland and M88; credential governance at Westpac.

Secrets ManagerCredential rotationLeast privilegeAccess governance

DevSecOps supply chain

Secure releases to APRA cyber requirements at Westpac; Docker image scanning and vulnerability patching at NAB, Queensland Government and M88; artifact integrity checks at M88.

Image scanningPatchingArtifact integrityAPRA

Detection and monitoring

SecOps anomaly detection across 400 AWS accounts and 8,000+ containers at Telstra, flagging privilege escalation and unauthorised access; session monitoring at NAB.

Anomaly detectionAudit trailsSession monitoring

Kubernetes security

Pod-level access controls and Kubernetes RBAC on AKS and EKS Fargate at Commonwealth Bank, with secure credential handling in the pipelines.

RBACPod access controlsGitOps audit trail

Kubernetes and GitOps as built at CBA

  • GitOps with ArgoCDMoved Commonwealth Bank's Gitflow repositories to GitOps, with declarative environments and every change tracked in Git.
  • AKS and EKS FargateOne Terraform pattern deploying to Azure Kubernetes Service and AWS EKS Fargate.
  • Helm and manifestsHelm charts and Kubernetes manifests, with testing and validation automated in the CI/CD pipeline.
  • Cluster accessKubernetes RBAC and pod-level access controls for production banking workloads.
  • Containers at scale8,000+ running containers covered by SecOps detection at Telstra; M88 rebuilt as containerised AWS.
Production engineering, UK, Ireland, Australia and Asia17years
Australia's Big Four: CBA, NAB and Westpac3 of 4big banks
AWS spend cut at M88$1M+USD a year
Covered by my SecOps anomaly detection at Telstra400AWS accounts
Including DevOps Engineer Professional5xAWS certs

Australian employers and regulators

Big Four
Australia's four major banks: CBA, Westpac, NAB and ANZ. CBA, NAB and Westpac appear below.
APRA
Australian Prudential Regulation Authority; the counterpart of the UK's PRA.
Consumer Data Right
Australia's Open Banking regime, modelled on UK Open Banking.

Experience log newest first

Principal DevOps Engineer

M88 (Mansion88) · Taiwan

Asia's largest sports betting, gaming and online casino operator.

  • Rescued a failed platform: led the vendor handover of the full stack (backend, front end, DevOps).
  • Re-architected it as containerised, cloud-native AWS in Terraform, with security hardening, managed secrets and credential rotation.
  • Container security scanning and artifact integrity checks in the release pipeline.
  • Cut AWS spend by more than $1M USD a year.
AWSTerraformDockerSecrets ManagerTypeScriptPython

Principal DevOps Engineer

Energy Queensland · Australia

The Queensland Government-owned electricity group behind Energex and Ergon Energy; think a UK distribution network operator.

  • Took 12 EC2 environments across DEV, TST and PRD through SIT, cyber security sign-off and go-live.
  • Privileged account onboarding, access governance and Entra ID group and RBAC management in PowerShell.
  • Postgres RDS via Terraform with Secrets Manager; credential rotation for Oracle and Databricks connections.
  • Terraform for infrastructure, Ansible for the application layer, GitHub Actions for CI/CD.
AWSTerraformAnsibleEntra IDGitHub ActionsPowerShell

Staff Software Engineer

Commonwealth Bank of Australia · Australia

Australia's largest bank, one of the Big Four; think Lloyds or Barclays.

  • Moved Gitflow repositories to GitOps on Kubernetes with ArgoCD and declarative environments.
  • Deployed with Terraform to Azure AKS and AWS EKS Fargate, one pattern across both clouds.
  • Pod-level access controls, Kubernetes RBAC and secure credential handling in the pipelines.
  • Rebuilt CI/CD from AWS CodeBuild to GitHub Actions with automated testing.
KubernetesArgoCDAKSEKS FargateTerraformGitHub Actions

Platform Engineer, DevSecOps

National Australia Bank · Australia

One of the Big Four; former owner of Clydesdale and Yorkshire Bank in the UK.

  • DevSecOps on the bank's production security-monitoring platform: Docker image scanning and container vulnerability patching.
  • Access governance and session monitoring controls.
  • Terraform and Jenkins pipelines; legacy CloudFormation migrated to Terraform; Python and Boto3 automation.
DockerTerraformJenkinsPythonSplunk

Senior Software Engineer, DevSecOps

Telstra · Australia

Australia's largest telco; the counterpart of BT.

  • SecOps anomaly detection across 400 AWS accounts, 4,000+ EC2 instances and 8,000+ containers, flagging privilege escalation and unauthorised access.
  • Identity and access data from AWS IAM Identity Center fed into the detection dashboards.
  • Architected a data lake PaaS (S3, Athena, Glue, PySpark, Databricks) with RBAC and security policies for multi-team access.
  • Machine learning models to production on SageMaker with CI/CD, IaC and monitoring.
AWSIAM Identity CenterTerraformCodePipelinePySparkSageMaker

AWS Cloud Engineer

Queensland Government · Australia

The state government of Queensland.

  • CI/CD for a JavaScript front end and .NET Core back end, run on SRE principles.
  • Container security scanning and Azure AD / SAML single sign-on.
AWSDockerAzure ADSAML.NET Core

DevOps Engineer, IAM

Westpac Institutional Bank · Australia

Australia's oldest bank (1817) and one of the Big Four.

  • Built Ping Identity and PingFederate on AWS (Terraform, ECS, OAuth2) for Open Banking under the Consumer Data Right.
  • Privileged access and credential governance, secrets management and access audit trails.
  • DevSecOps supply-chain security and secure releases to APRA cyber requirements.
PingFederateOAuth2AWSTerraformECS

DevOps Engineer

Deloitte Ireland · Ireland

  • Built the data warehouse for the Cancer Waiting Times project.
  • Migrated on-premises workloads to AWS with identity and access controls, ready for production operations.
AWSData warehousing

DevOps Integration Engineer

Universal Music Group · UK

  • Monitoring of MuleSoft ESB and RabbitMQ failed messages, fixed ahead of a January go-live.
MuleSoftRabbitMQAWS

Early career

Ecommerce developer (LAMP), Deloitte (Sydney and UK), NHS Connecting for Health, giffgaff, Vodafone Australia, Bank of Queensland

About

Where it started

I have run Linux since high school, which is also where I built my first websites. My first job was as an ecommerce developer on the LAMP stack (Linux, Apache, MySQL and PHP), working on both the server side and what customers saw in the browser.

Education

I took a First in Software Engineering at London Metropolitan University, where I received the BCS Best First Class award, and went on to complete an MSc in Software Engineering at the University of Oxford.

UK

In the UK I began in consulting with Deloitte, then worked on engagements for the NHS (Connecting for Health), giffgaff and Universal Music. I also carried out AWS migration work for Deloitte in Ireland.

Australia

In Australia I worked for Deloitte in Sydney, Vodafone and Bank of Queensland, before moving into platform and security engineering for three of the four major banks (Commonwealth Bank, NAB and Westpac), Telstra, Energy Queensland and the Queensland Government.

Most recently

I led the rescue of Asia's largest sports betting and gaming platform. I took over the entire system from a vendor that had failed to deliver, rebuilt it on AWS as a secure, containerised platform defined in Terraform, and cut its cloud costs by more than US$1 million a year.

Other certifications

Microsoft Technology AssociateC# / .NET Software Development FundamentalsLondon Metropolitan University
Microsoft Technology AssociateDatabase Design with Microsoft SQL ServerLondon Academy of IT
Java ProgrammingLondon Academy of IT
C# / ASP.NET Web ProgrammingLondon Academy of IT
Introduction to TCP/IP and NetworkingLeeds Networking Academy

Skills security first

Security and identity

IAMIAM Identity CenterEntra IDPingFederateOAuth2SAMLRBACSecrets ManagerCredential rotationImage scanningDevSecOps

Kubernetes and containers

KubernetesAKSEKS FargateArgoCDHelmDockerECS

Linux and web

Linux administrationBashApacheMySQLPHP

Cloud

AWSAzureCloudflareEC2LambdaS3RDSDynamoDBVPCCloudWatch

Infrastructure as code

TerraformAnsibleCloudFormation

CI/CD and GitOps

GitHub ActionsArgoCDJenkinsCodePipelineCodeBuild

Languages

PythonTypeScriptJavaScriptPowerShellBashGroovyC# / .NETJavaSQL

Data and observability

DatabricksFivetranGlueAthenaPySparkPostgreSQLOracleGrafanaSplunk

Machine learning

SageMakerMLOps

Contact contract · permanent · UK

Emailbradmurdochuk@gmail.com
LinkedInlinkedin.com/in/bradmurdoch
GitHubgithub.com/BMurdochUK

Available for UK roles: contract or permanent, on-site, hybrid or remote. Dual British and Australian citizen.

© 2026 Brad Murdoch