Platform Engineering Lead

We are looking for a hands-on Platform Engineering Lead to own the design, security, reliability and day-to-day operation of Finstro’s AWS platform, as well as the developer experience built on top of it. This is a technical leadership role where you’ll set the standards and then build them. You’ll be in the code and the console, writing Terraform, fixing pipelines, tuning alerts and leading incidents, while helping the wider engineering team ship safely and quickly. You’ll bring structure to what exists today, define what good looks like, and turn that into documented, automated and repeatable ways of working that can scale as the organisation grows. The role starts as a lead-by-example individual contributor, with the opportunity to build a small platform engineering team as the platform matures. The first six months will focus on platform consolidation, production reliability and establishing strong engineering foundations About Finstro Finstro is a fast-growing non-bank lender, providing businesses with cash flow, flexibility and confidence every step of the way. We go beyond rigid product silos and understand speed is only a part of the answer. Since 2012, we’ve supported the growth aspirations of over 6,000 businesses through over $2.5b of funded transactions. If you have energy, ambition and want to work for a dynamic, rapid growth, FinTech business, there are exciting opportunities to advance your career by joining our global team. Key Skills Required To excel in this role you'll need deep, current, hands-on AWS engineering skills and the judgement to know when to build, when to buy and when to leave something alone. You are pragmatic rather than dogmatic: you'll choose the boring, well-understood option that the team can operate over the elegant one that only you can. You are comfortable owning production in a small organisation, diagnosing under pressure, making the call, and then fixing the underlying cause rather than the symptom. You are the final technical escalation point for the platform, and that is the part of the job you find energising rather than daunting. You lead through credibility and working examples and write things down as a habit rather than a task at the end. You take real satisfaction in removing toil for other engineers. You can explain technical risk and trade-offs to a non-technical audience and know the difference between a control that materially reduces risk and one that simply adds process. Key Responsibilities: Infrastructure ownership. Own the architecture, build and operation of Finstro’s AWS platform: compute, networking, data stores, identity and deployment environments. All new infrastructure is defined as code, with existing production brought under infrastructure-as-code management against an agreed plan. Cloud spend is understood, attributed and forecast as a first-class engineering concern.Security and compliance. Partner with Security and Risk to keep the platform defensible: least-privilege IAM, secrets management, patching and vulnerability remediation, network segmentation, logging and audit evidence. Build controls into the platform and delivery pipeline rather than bolting them on, in line with Finstro’s legal, regulatory and contractual obligations in each market. Security and Risk set the requirement. This role builds the controls and produces the evidence.Standards and technical leadership. Define, document and champion the engineering standards for how we build, deploy, run and secure services. Influence and mentor engineers without relying on formal authority. Own the platform roadmap and represent its priorities in quarterly planning. Experience and Skills Required: Deep hands-on AWS as builder and operator, not only architect: Lambda, ECS and EC2, networking (VPC, subnetting, routing, DNS, load balancing), data services (RDS, S3, DynamoDB), multi-account structure and governance (AWS Organizations), identity (IAM Identity Center), with experience setting up or restructuring a multi-account environment, and cost visibility.Expert with infrastructure as code, ideally Terraform: module design, state management, drift detection and multi-environment promotion.Strong CI/CD engineering (GitHub Actions, GitLab CI, Jenkins or similar), including artefact management and familiarity with safe release strategies (blue/green, canary, rollback).Security-minded engineering: least-privilege IAM, secrets management, patching and vulnerability remediation within the AWS platform.Strong written and verbal communication, from engineers through to non-technical stakeholders and executives. Desirable Experience working in a regulated or audited environment (e.g. ISO 27001, SOC 2, PCI DSS or APRA-aligned environments).Experience collaborating with engineering teams across different time zones. What we offer: Competitive compensation package including superannuation and benefits.Opportunity to work with cutting-edge technologies in a dynamic and innovative environment.Collaborative and supportive team culture. This role is based onsite in Sydney, Australia. Candidates must be in and authorised to work in Australia.