Summary
✨ AI‑Generated
A senior cloud engineering opportunity focused on building and automating secure, compliant Azure infrastructure. You will develop PowerShell DSC configurations, manage Azure Policy and remediation workflows, create Terraform modules, maintain cloud state through Azure Storage, and orchestrate infrastructure changes with Azure DevOps pipelines. The role also involves stakeholder collaboration, dependency mapping, and thorough testing and validation of cloud changes.
Highlights
Senior cloud engineering role focused on Azure infrastructure, policy governance, automation, compliance, and Infrastructure as Code. The position offers opportunities to design reusable Terraform modules, automate remediation through CI/CD pipelines, improve cloud compliance, and work closely with stakeholders on complex infrastructure dependencies.
Description
Summary (Key Skills & Role):
· Authoring and deploying PowerShell DSC configurations for VM baseline enforcement; onboarding target VMs to Azure Automation State Configuration; drift detection, remediation and compliance reporting
· Azure Policy: Design and assignment of custom and built-in policy definitions across target subscriptions; remediation task configuration for non-compliant resources; policy exemption governance and documentation.
· Stakeholder engagement to map integration points, upstream/downstream dependencies, and any SLA or latency sensitivities that may influence the remediation approach
· Terraform: Design and build of Terraform modules for approved Azure resource types; state file management via Azure Storage backend; integration with existing naming conventions, tagging standards, and landing zone patterns
· Automation of all remediation changes using Terraform, with deployment orchestrated through Azure DevOps pipelines.
· Testing and validation of each remediated service to confirm connectivity, expected behavior, and firewall rule compliance post-change
· Documentation of the final-state architecture, DSC changes, design revision and runbooks for ongoing operational support
· Handover and knowledge transfer to the AustralianSuper Cloud Services team
• Develop standards, engineering patterns, DevOps policies and IaC modules.
• Set the standard approach project engineering teams will take in their infrastructure delivery work.
• Develop, deploy, and configure workloads to Microsoft Azure using Terraform in a DevOps environment.
• Develop solution, detailed and functional design documents, ensuring designs are prepared in accordance with standards and guidelines.
• Develop, implement, and maintain monitoring and observability tools for managed environments.
• Engage in hands-on development to balance workload or address significant complexity through technical spike: build, test including non-functional areas like security, reliability, and performance.
• Review technical detail designs and ensure technical designs meet functional, resilience, security, reuse, and operational needs
• Collaborate with project/ BAU teams including architects, delivery squads, principal engineers, and project managers to meet the project technology and delivery objectives
• Design technology solutions to automate existing processes using DevOps.
• Contribute towards the Fund’s central knowledge repository for design models and patterns.
• Provide technical leadership and ensure alignment of cloud solutions to target architecture, standards, and best practices.
• Collaborate with other technology teams, assisting with the demands of operations as required, and empowering teams to enable reliability, resilience, and supportability of platforms
Essential:
• 8-10+ years’ experience working in medium to large IT environments.
• 4 years working with Azure Public Cloud services designing and building cloud solutions using IaaS and PaaS services, with in depth understanding of cloud products and offerings.
• Cloud Service Proficiency: In-depth knowledge of Azure cloud platform.
Understanding how to leverage different services for computing, storage, database management, and networking is crucial.
• Experience developing and adopting DevSecOps strategy and ways-of-working.
• Hands on deploying applications and building infrastructure in cloud via Azure DevOps CI/CD deployment pipelines.
• Experience in scripting and automation: Skills in Python, PowerShell, Bash or similar.
• Hands on with Infrastructure-as-Code and experience provisioning resources using Terraform OSS.
• Knowledge of container frameworks, Docker and Kubernetes.
• Deep knowledge of running IaaS workloads and design/operation of Azure Backup and Azure Monitor for IaaS workloads.
• In-depth understanding of Azure policies and implementing them to enforce compliance, security, and governance using a policy-as-code deployment model
