blog.

The AI Salary Delusion

Cover Image for The AI Salary Delusion
PJ Heta
PJ Heta

The Seniority Trap

New Zealand tech leaders are currently obsessed with chasing a 30 percent salary premium for AI talent that they do not know how to manage. Recent January 2026 data shows that while AI roles command top dollar, the gap between executive expectation and engineering reality is widening. You are fighting over a handful of specialists while your fundamental infrastructure is handled by underpaid engineers who are eyeing the exit. If you cannot secure your existing cloud environment—especially with the rise of AI-specific threats like ZombieAgent—adding an AI layer is just automating your eventual breach.

This Week's Key Signals

NZ Firms Lift Tech Spend as AI Scales (4 min read) New research indicates that 2026 is the year AI moves from trials to core operations in New Zealand. Tech budgets are lifting, but the focus is shifting toward "agentic" capabilities. You aren't just hiring for prompt engineering anymore; you're hiring for model integration and orchestration.

Microsoft Cloud: One Year in Aotearoa (3 min read) One year after the launch of Microsoft's New Zealand hyperscale region, the local cloud landscape has fundamentally shifted. Data sovereignty is now about how AI models interact with sensitive local data. if you're still on-prem, you're missing the local low-latency AI bus.

Apple Picks Gemini for Siri (12 min read) The multi-year partnership between Apple and Google (Gemini) marks a massive shift in the consumer AI landscape. As Siri becomes a true agentic interface, the expectation for internal corporate tools will skyrocket. The "consumerisation of AI" is the new shadow IT.

MMH Cyber Breach Update: Jan 9 (5 min read) The ongoing January breach affecting New Zealand health records highlights why identity is the only perimeter that matters in 2026. Firms are still over-investing in legacy firewall tech while MFA and IAM policies are being bypassed by social engineering and deepfakes.

Deep Dive: Agentic Infrastructure

Inside ZombieAgent: AI Hijacking (6 min read) The discovery of "ZombieAgent"—a zero-click prompt injection flaw—allows attackers to silently hijack AI agents. This moves the threat model from "user error" to "infrastructure vulnerability." Standardising your internal developer platforms (IDP) is now a critical security requirement.

AI Tools Gaining Traction

EU Verdict on Google-Wiz Deal Due (3 min read) The EU's February deadline for the Google-Wiz merger review is the biggest regulatory signal of 2026. This acquisition will define the next era of integrated cloud security, potentially forcing a massive wave of consolidation in the security market.

Nvidia at CES 2026 (4 min read) CES 2026 proved that Nvidia is the operating system for the AI era. Blackwell architectures are now the baseline, and any local data centre plans not accounting for these power densities are already functionally obsolete.

Quick Takes

Pulumi Neo GA (2 min read) Pulumi's Neo platform moves us closer to "Self-Healing Infrastructure" by using AI agents to analyze live observability data. The goal is to automate the remediation of configuration drift before it becomes an outage.

Snyk AppRisk Pro (2 min read) Snyk is doubling down on AI-driven Application Security Posture Management (ASPM). It prioritises vulnerabilities based on actual runtime risk, helping teams cut through the noise of AI-generated code.

Featured Profile

Kiran
Cloud Security Architecture Specialist
📍 Auckland, New Zealand
AVAILABLE
Kiran has spent over a decade securing mission-critical workloads across the New Zealand financial services and public sectors. His expertise lies in re-architecting legacy infrastructure into secure, sovereign cloud environments that move beyond basic perimeter controls.

Core Skills

Cloud Governance Sovereign Cloud Compliance Infrastructure as Code (IaC) Zero Trust Architecture DevSecOps Integration Threat Modelling Automated Security Monitoring Identity and Access Management (IAM)

Tools & Technologies

Azure Sentinel AWS Security Hub Terraform GitHub Actions Microsoft Defender for Cloud Kubernetes HashiCorp Vault Splunk