Senior Cloud & DevOps Engineer
Summary
A Senior Cloud/DevOps Engineer embedded in an engineering squad, owning cloud infrastructure, CI/CD pipelines, and security compliance for open banking platforms on AWS EKS. Daily work centers on Terraform/Helm automation, HashiCorp Vault secrets, LaunchDarkly feature flags, and Snyk vulnerability scanning.
About the role
As a Senior Cloud / DevOps Engineer embedded within a high-impact engineering squad, you will own cloud infrastructure, deployment pipelines, and security compliance for critical digital resilience and open banking platforms. You will design, build, and maintain a cloud-agnostic, portable infrastructure foundation targeted primarily for AWS Kubernetes (EKS).
Key responsibilities
Establish automated Terraform and Helm pipelines
Enforce strict vulnerability management
Integrate enterprise secrets management systems
Manage continuous delivery pipelines using feature flags for progressive beta rollouts
Partner closely with internal security teams to ensure releases align with strict penetration testing lead times and enterprise security governance
About you
5+ years of hands-on experience provisioning, managing, and scaling production Kubernetes clusters on AWS (EKS)
Advanced proficiency with Terraform for Infrastructure as Code (IaC) and Helm for Kubernetes package management
Direct experience configuring, operating, and integrating HashiCorp Vault in production environments
Proven track record building CI/CD deployment pipelines utilizing LaunchDarkly (or equivalent feature flag tools) for progressive rollouts and feature kill-switches
Hands-on experience integrating Snyk vulnerability scanning and automated patching tools directly into CI/CD pipelines
Demonstrated background navigating enterprise security policies, vulnerability remediation, and formal penetration testing frameworks
Exposure to GCP infrastructure to support cloud-agnostic portability requirements
Operational familiarity supporting containerized backend services (Go/Java), PostgreSQL databases, Temporal workflow engines, or gRPC interfaces
Strong commitment to declarative infrastructure, strictly avoiding manual environment tweaks in favor of version-controlled modules
Proactive approach to secret management, vulnerability patching, and compliance integration across all release cycles
Available to commit to 4 weeks of onsite work within Melbourne CBD, with hybrid/remote following.