Summary
✨ AI‑Generated
A cloud engineering role focused on securing and standardizing Azure environments through configuration management, policy enforcement, infrastructure-as-code, and automated remediation. You will build Terraform modules, manage cloud state, implement compliance controls, detect and correct configuration drift, and orchestrate changes through CI/CD pipelines while collaborating with stakeholders on dependencies and service requirements.
Highlights
Work on cloud infrastructure automation, configuration compliance, policy governance, and infrastructure-as-code. The role offers hands-on ownership of Azure environments, Terraform modules, automated remediation, testing, and deployment pipelines.
Description
Summary (Key Skills & Role):
Authoring and deploying PowerShell DSC configurations for VM baseline enforcement; onboarding target VMs to Azure Automation State Configuration; drift detection, remediation and compliance reportingAzure Policy: Design and assignment of custom and built-in policy definitions across target subscriptions; remediation task configuration for non-compliant resources; policy exemption governance and documentation.Stakeholder engagement to map integration points, upstream/downstream dependencies, and any SLA or latency sensitivities that may influence the remediation approachTerraform: Design and build of Terraform modules for approved Azure resource types; state file management via Azure Storage backend; integration with existing naming conventions, tagging standards, and landing zone patternsAutomation of all remediation changes using Terraform, with deployment orchestrated through Azure DevOps pipelines.Testing and validation of each remediated service to confirm connectivity, expected behavior, and firewall rule compliance post-changeDocumentation of the final-state architecture, DSC changes, design revision and runbooks for ongoing operational supportHandover and knowledge transfer to the AustralianSuper Cloud Services team
• · Develop standards, engineering patterns, DevOps policies and IaC modules.
• · Set the standard approach project engineering teams will take in their infrastructure delivery work.
• · Develop, deploy, and configure workloads to Microsoft Azure using Terraform in a DevOps environment.
• · Develop solution, detailed and functional design documents, ensuring designs are prepared in accordance with standards and guidelines.
• · Develop, implement, and maintain monitoring and observability tools for managed environments.
• · Engage in hands-on development to balance workload or address significant complexity through technical spike: build, test including non-functional areas like security, reliability, and performance.
• · Review technical detail designs and ensure technical designs meet functional, resilience, security, reuse, and operational needs
• · Collaborate with project/ BAU teams including architects, delivery squads, principal engineers, and project managers to meet the project technology and delivery objectives
• · Design technology solutions to automate existing processes using DevOps.
• · Contribute towards the Fund’s central knowledge repository for design models and patterns.
• · Provide technical leadership and ensure alignment of cloud solutions to target architecture, standards, and best practices.
• · Collaborate with other technology teams, assisting with the demands of operations as required, and empowering teams to enable reliability, resilience, and supportability of platforms
Essential:
• 8-10+ years’ experience working in medium to large IT environments.
• 4 years working with Azure Public Cloud services designing and building cloud solutions using IaaS and PaaS services, with in depth understanding of cloud products and offerings.
• Cloud Service Proficiency: In-depth knowledge of Azure cloud platform.
Understanding how to leverage different services for computing, storage, database management, and networking is crucial.
• Experience developing and adopting DevSecOps strategy and ways-of-working.
• Hands on deploying applications and building infrastructure in cloud via Azure DevOps CI/CD deployment pipelines.
• Experience in scripting and automation: Skills in Python, PowerShell, Bash or similar.
• Hands on with Infrastructure-as-Code and experience provisioning resources using Terraform OSS.
• Knowledge of container frameworks, Docker and Kubernetes.
• Deep knowledge of running IaaS workloads and design/operation of Azure Backup and Azure Monitor for IaaS workloads.
• In-depth understanding of Azure policies and implementing them to enforce compliance, security, and governance using a policy-as-code deployment model.
