Cloud Tech Lead

The Opportunity

As Medibank continues to invest in innovative, forward-thinking technology, we're seeking a Cloud Technical Lead for our Cloud Engineering team. 

Building on the cloud is at its most impactful when reliability, security and cost work together, and that's exactly where this role lives. Reporting to the Engineering Manager, SRE & Cloud Governance, you'll provide technical leadership across our AWS infrastructure, building the guardrails, automation and standards that keep a growing cloud environment secure, reliable and efficient at scale. Our work is focused on AWS across the full range of core services, with some Azure in the mix (a plus, not essential).  

This is a role for a builder. Working across uplift and continuous improvement initiatives, you'll spend most of your time deep in the engineering, designing controls, writing automation, and turning standards into working code, while setting the technical bar through what you deliver. This is an opportunity to have real ownership, working directly on things that affect how the whole cloud environment runs, and provide hands-on leadership, influencing and setting standards. 

The Responsibilities:

• Design, build and maintain cloud guardrails and preventative controls for centralised governance: SCPs/RCPs, AWS Organizations, Control Tower and Policy as Code.
• Define and implement observability standards: logging, monitoring, metrics, tagging and alerting.
• Build and maintain cloud assurance and reliability frameworks across golden AMIs, backups, patching, DR, reliability and configuration compliance.
• Prioritize and drive remediation of cloud risks and security misconfigurations, balancing urgent fixes with planned work.
• Lead cloud security posture and maturity uplift through automation and compliance monitoring, including guardrails for emerging AI services.
• Drive cloud cost optimization and FinOps practices, including cost visibility and allocation, rightsizing and anomaly detection, delivering ongoing savings.
• Provide technical direction to other engineers and partner with technical teams to roll out standards, provide guidance and gather feedback. 

What we're looking for: 

• 6-7+ years of experience and ideally 5+ hands-on in AWS, with proven capability across cloud engineering and governance, ideally as a Senior Engineer or Technical Lead.
• Strong hands-on AWS background across core services, including:
  • Identity & governance: IAM, Organizations, Control Tower, Config, CloudTrail
  • Networking: VPC, Transit Gateway, Route 53, security groups/NACLs
  • Compute & containers: EC2, Lambda, ECS/EKS
  • Storage & data: S3, EBS, RDS, DynamoDB
  • Security: Security Hub, GuardDuty, KMS, WAF, Firewall Manager
  • Observability: CloudWatch (Logs, Metrics, Insights), Splunk
• Experience with multi-account strategy, account vending, landing zone tooling.
• Experience implementing preventative controls, including IAM permission boundaries, Policy as Code, centralized network security (AWS Firewall Manager) and golden AMIs / hardened image pipelines (e.g. EC2 Image Builder).
• Experience with the AWS Well-Architected Framework, applying its pillars to assess and uplift cloud environments.
• Strong cloud security fundamentals (least privilege, segmentation, encryption, secrets), risk and vulnerability management, and familiarity with CSPM tooling.
• Strong IaC, coding and automation: Terraform and/or CloudFormation, Python, boto3, Bash.
• Hands-on CI/CD (e.g. Jenkins, GitHub Actions or similar) building and maintaining automated pipelines.
• Cloud FinOps experience with tools such as Cost Explorer, Compute Optimizer and Cost and Usage Reports, analysing spend and delivering savings.
• Awareness of AI governance and guardrails is a plus (e.g. Amazon Bedrock access, data protection)  
• One or more relevant AWS certifications (e.g. Solutions Architect / DevOps / Security Specialty).
• Ability to provide technical leadership and own outcomes while staying hands-on day to day.