Senior Cloud Devops Engineer

Seeking a Senior Cloud Devops Engineer with  5+ years of hands-on Azure platform engineering experience 

Job details

The department is seeking a Senior Cloud DevOps Engineer – SFIA Level 5 who will have the responsibility for designing, building, and sustaining the cloud platform and delivery pipeline infrastructure that underpins the agency's ICT modernisation program. Operating at SFIA Level 5, the contractor will lead hands-on platform engineering across Azure and implement Infrastructure as Code using Terraform, and drive CI/CD automation through Azure DevOps. The role applies DevSecOps principles to embed security controls into pipeline and runtime operations, and ensures all platform configurations align with ISM and Essential Eight maturity requirements. The contractor will provide BAU support, L2/L3 incident triage, and contribute to knowledge transfer to build enduring agency capability

Key duties and responsibilities

• Design, build, and maintain Azure-based cloud and hybrid platform infrastructure to support program workloads.
• Implement and maintain Kubernetes-native workloads including deployments, stateful sets, config maps, secrets management, and persistent volumes.
• Provision and manage Azure resources: Azure containerisation services, App Services, Azure Container Registry, Azure Data services, Storage Accounts, Key Vault, and related services.
• Design and maintain multi-stage CI/CD pipelines in Azure DevOps (YAML-based) and GitHub Actions for application build, test, and deployment automation.
• Integrate automated security scanning (SAST, DAST, container image scanning) into pipeline stages to enforce shift-left security.
• Author and maintain modular Terraform configurations for all Azure infrastructure using remote state management and workspaces.
• Implement GitOps workflows for declarative environment management and automated rollback capability.
• Configure and maintain centralised observability tooling — Azure Monitor, Log Analytics, Application Insights, and Prometheus/Grafana.
• Implement and maintain RBAC for Azure subscriptions, and CI/CD pipeline access using Entra ID and managed identities.
• Ensure platform configurations align with Essential Eight maturity controls and ISM requirements — patching, hardening, and multi-factor authentication.
• Configure and maintain network security controls: NSGs, Azure Firewall, private endpoints, and VNet integration.
• Provide L2/L3 incident triage and resolution across platform and infrastructure components.
• Produce and maintain infrastructure diagrams, runbooks, and DR/BCP documentation.
• Facilitate knowledge transfer to agency operational teams to build internal platform capability.
• Coach and mentor team members; liaise with Senior Executive Officers on complex platform delivery matters.

About the organisation

The Department provides unique, actionable and insightful intelligence to combat the threats Australia faces from transnational serious and organised crime. The Department is a member of the Five Eyes Law Enforcement Group and National Intelligence Community. The departments purpose is to protect Australia from serious crime threats by collecting, assessing and disseminating intelligence and policing information.

Essential criteria

• 5+ years of hands-on Azure platform engineering experience and experience working within a Landing Zone construct: Virtual Networks, AKS, App Services, Azure Container Registry, Key Vault, and Azure Monitor
• Demonstrated Azure Kubernetes Service (AKS) and Azure Container Apps (ACA) administration: cluster operations, node management, namespace/RBAC, Operators, and persistent storage configuration
• CI/CD pipeline design using Azure DevOps (YAML), including integrated security scanning (SAST, DAST, container image scanning)
• Infrastructure as Code proficiency: Terraform (required) — modular design, remote state management, and policy-as-code
• Container technologies: Docker, Kubernetes, Helm chart authoring, container registry management, and container image security
• Scripting and automation: Python, Bash, Az CLI and/or PowerShell for platform automation and operational tooling

Desirable criteria

• GitOps tooling: Continuous delivery tooling and usage
• Service mesh technologies: Istio, Linkerd
• Microsoft certifications: AZ-104, AZ-400, AZ-305, or equivalent Red Hat credentials (RHCE, EX280)
• Experience with secrets management tooling: HashiCorp Vault or Azure Key Vault advanced configuration

Contract:  12 Months Contract  with  2 x 12 month extensions 

Security Required:  NV1 - Security Clearance required 

Location  - Canberra 

How to Apply - Please upload your resume to apply. Candidates will need to be willing to undergo pre-employment screening checks which may include, ID and work rights, security clearance verification and any other client requested checks

 

Closing date: Friday 31 July by 9am 

 

Call Joanne Finchett on 0480 002454 or email Joanne@whizdom.com.au for any further information