Cloud Tech Lead - AWS Infrastructure

About the role

Medibank is seeking a Cloud Technical Lead for its Cloud Engineering team, reporting to the Engineering Manager, SRE & Cloud Governance. The role provides technical leadership across AWS infrastructure, building guardrails, automation and standards that keep a growing cloud environment secure, reliable and efficient at scale. It sits within uplift and continuous improvement initiatives, with most time spent deep in engineering.

Key responsibilities

• Design, build and maintain cloud guardrails and preventative controls: SCPs/RCPs, AWS Organizations, Control Tower and Policy as Code
• Define and implement observability standards: logging, monitoring, metrics, tagging and alerting
• Build and maintain cloud assurance and reliability frameworks across golden AMIs, backups, patching, DR, reliability and configuration compliance
• Prioritize and drive remediation of cloud risks and security misconfigurations
• Lead cloud security posture and maturity uplift, including guardrails for emerging AI services
• Drive cloud cost optimization and FinOps practices, including cost visibility, allocation, rightsizing and anomaly detection
• Provide technical direction to other engineers and partner with teams to roll out standards

Required profile

• 6-7+ years of experience, ideally 5+ hands-on in AWS, as a Senior Engineer or Technical Lead
• Experience with multi-account strategy, account vending and landing zone tooling
• Experience implementing preventative controls such as IAM permission boundaries, Policy as Code, centralized network security and golden AMIs
• Familiarity with the AWS Well-Architected Framework and cloud security fundamentals
• Cloud FinOps experience and awareness of AI governance and guardrails (a plus)
• AWS certifications (e.g. Solutions Architect, DevOps, Security Specialty) and hands-on technical leadership

Required skills

• Core AWS services: IAM, Organizations, Control Tower, Config, CloudTrail, VPC, Transit Gateway, Route 53, EC2, Lambda, ECS/EKS, S3, EBS, RDS, DynamoDB, Security Hub, GuardDuty, KMS, WAF, CloudWatch, Splunk
• IaC and automation: Terraform and/or CloudFormation, Python, boto3, Bash
• CI/CD pipelines (e.g. Jenkins, GitHub Actions)
• FinOps tools: Cost Explorer, Compute Optimizer, Cost and Usage Reports