Lead DevOps Engineer

Location: Melbourne, VIC

Salary: $80,001 - $100,000

Job Type: Permanent position | Full time position

• Assessing and controlling the risks that could compromise the performance, reliability and security of applications at every stage of the product lifecycle, from early design and build through to live production operation (for example, using AWS GuardDuty, AWS Security Hub and AWS Config).

• Applying and overseeing the encryption of data both in transit and at rest using AWS KMS, and governing how the secrets, keys and credentials relied on by applications and infrastructure are securely stored, encrypted and decrypted with AWS Secrets Manager.

• Keeping systems and log data under observation to surface unusual behaviour and possible threats, and carrying out forensic examination of incidents to establish the underlying cause and shape the response (for example, using Amazon CloudWatch, AWS CloudTrail and Sentry).

• Creating and evolving the in-house tools, scripts and services needed to run, administer and safeguard the organisation's software, and to support its release and ongoing operation (for example, using Python, Rust and AWS Lambda).

• Shaping continuous improvement and continuous delivery approaches that span system design and the broader development lifecycle, and championing their adoption across the engineering team (for example, using GitHub Actions, ArgoCD and Argo Rollouts).
• Gathering and interpreting operational and performance data from live systems, and drawing on those insights to report on application health and to guide engineering and design decisions (for example, using Amazon CloudWatch and Sentry).

• Overseeing the automated testing, build and deployment of software and applications, including the design and upkeep of CI/CD pipelines in GitHub Actions, so that releases are consistent, dependable and delivered to agreed quality standards (for example, using AWS, Docker, Kubernetes, Terragrunt and ArgoCD).

• Contributing technical advice, guidance and specialist knowledge to software design proposals and strategy, including appraising tools and platforms such as Sentry and Argo Rollouts, estimating cost and effort with the AWS cost calculator, and advising on software purchases, upgrades and licensing.

• Producing, revising and maintaining technical documentation, end-user guides and operational procedures, and ensuring this material remains accurate as the software evolves.

• Authoring, building, maintaining and amending the source code for infrastructure and containerised services so that it meets system requirements, technical designs and specifications, while adhering to the team's quality-accredited coding standards (for example, using Python, Rust, HCL and related configuration languages).

• Testing application code and diagnosing, debugging and correcting errors and faults within the team's established testing protocols, guidelines and quality standards, so that applications behave to specification before release (for example, using GitHub Actions and Sentry).

• Examining current applications, systems and delivery workflows to uncover technical limitations, deficiencies and bottlenecks, and proposing improvements to the associated code, tooling, procedures and methods (for example, using Amazon CloudWatch and the AWS

Well Architected Tool).  

• Researching, consulting on, analysing and evaluating the requirements of systems and programs alongside product owners, engineers and other stakeholders, and assessing how proposed changes would affect existing applications.

  Additional Responsibilities (reflecting the Technical Lead & Architect scope of the role): 

• Owning the identity and access management architecture for the platform, including Keycloak (or an equivalent identity provider), OAuth2/OIDC and role-based access control across the microservice estate.

• Designing and maintaining the AWS Organizations and multi-account IAM structure, including account-level separation, permission boundaries, service control policies (SCPs) and cross account trust policies.

• Architecting and operating the policy-as-code and fine-grained authorisation layer (OPA/OPAL, Rego) for real-time access control across services.

• Owning the technical compliance certification programme (ISO 27001, SOC 2 Type II, IRAP), translating controls into technical implementations and maintaining audit evidence via Vanta.

• Defining and enforcing security standards followed by all engineering teams, including secure coding practices, secret management, container security baselines and dependency vulnerability management.
• Defining and enforcing service level objectives (SLOs) and error budgets, and driving FinOps discipline including cost attribution, workload right-sizing and cloud cost governance (including AI inference costs).

• Acting as the primary security review authority for all engineering teams, with design changes requiring sign-off before Architecture Review approval, and participating in the Architecture Design Board with decisions recorded as Architecture Decision Records (ADRs).

  Leadership & Team Management: 

• Leading and developing a team of platform and security engineers in a player-coach model, remaining hands-on as a technical contributor while providing architectural direction.

• Mentoring and growing engineers across infrastructure, security and compliance disciplines through design reviews, code feedback and structured development c...

Read more: https://workinitiatives.com.au/job/details? id=6214945