Senior Cloud Devops Engineer

Senior Cloud DevOps Engineer

Seeking a Senior Cloud DevOps Engineer with 5+ years of hands on Azure platform engineering experience.

The department is seeking a Senior Cloud DevOps Engineer - SFIA Level 5 who will have the responsibility for designing, building, and sustaining the cloud platform and delivery pipeline infrastructure that underpins the agency's ICT modernisation program. Operating at SFIA Level 5, the contractor will lead hands on platform engineering across Azure and implement Infrastructure as Code using Terraform, and drive CI/CD automation through Azure DevOps. The role applies DevSecOps principles to embed security controls into pipeline and runtime operations, and ensures all platform configurations align with ISM and Essential Eight maturity requirements. The contractor will provide BAU support, L2/L3 incident triage, and contribute to knowledge transfer to build enduring agency capability.

Key duties and responsibilities

• Design, build, and maintain Azure based cloud and hybrid platform infrastructure to support program workloads.
• Implement and maintain Kubernetes native workloads including deployments, stateful sets, config maps, secrets management, and persistent volumes.
• Provision and manage Azure resources: Azure containerisation services, App Services, Azure Container Registry, Azure Data services, Storage Accounts, Key Vault, and related services.
• Design and maintain multi stage CI/CD pipelines in Azure DevOps (YAML based) and GitHub Actions for application build, test, and deployment automation.
• Integrate automated security scanning (SAST, DAST, container image scanning) into pipeline stages to enforce shift left security.
• Author and maintain modular Terraform configurations for all Azure infrastructure using remote state management and workspaces.
• Implement GitOps workflows for declarative environment management and automated rollback capability.
• Configure and maintain centralised observability tooling - Azure Monitor, Log Analytics, Application Insights, and Prometheus/Grafana.
• Implement and maintain RBAC for Azure subscriptions, and CI/CD pipeline access using Entra ID and managed identities.
• Ensure platform configurations align with Essential Eight maturity controls and ISM requirements - patching, hardening, and multi factor authentication.
• Configure and maintain network security controls: NSGs, Azure Firewall, private endpoints, and VNet integration.
• Provide L2/L3 incident triage and resolution across platform and infrastructure components.
• Produce and maintain infrastructure diagrams, runbooks, and DR/BCP documentation.
• Facilitate knowledge transfer to agency operational teams to build internal platform capability.
• Coach and mentor team members; liaise with Senior Executive Officers on complex platform delivery matters.

Essential criteria

• 5+ years of hands on Azure platform engineering experience and experience working within a Landing Zone construct: Virtual Networks, AKS, App Services, Azure Container Registry, Key Vault, and Azure Monitor
• Demonstrated Azure Kubernetes Service (AKS) and Azure Container Apps (ACA) administration: cluster operations, node management, namespace/RBAC, Operators, and persistent storage configuration
• CI/CD pipeline design using Azure DevOps (YAML), including integrated security scanning (SAST, DAST, container image scanning)
• Infrastructure as Code proficiency: Terraform (required) - modular design, remote state management, and policy as code
• Container technologies: Docker, Kubernetes, Helm chart authoring, container registry management, and container image security
• Scripting and automation: Python, Bash, Az CLI and/or PowerShell for platform automation and operational tooling

Desirable criteria

• GitOps tooling: Continuous delivery tooling and usage
• Service mesh technologies: Istio, Linkerd
• Microsoft certifications: AZ 104, AZ 400, AZ 305, or equivalent Red Hat credentials (RHCE, EX280)
• Experience with secrets management tooling: HashiCorp Vault or Azure Key Vault advanced configuration

Contract Information

Contract: 12 Months Contract with 2 x 12 month extensions

Security Required: NV1 - Security Clearance required

Location: Canberra