Description At AustralianSuper, we truly care about our colleagues. We know work and life are intertwined. That’s why we support the diverse needs of everyone and have policies that enable us all to thrive and be truly flexible. We ensure diversity is celebrated for the opportunity it provides us all to learn and grow, and deliver better outcomes for members. Your New Role: Reporting to the Cloud Engineering Manager, the Cloud Engineer is responsible for assisting with solution design and implementation, as well as continuous improvement of the Fund’s Azure platforms. The role is responsible for providing hands-on cloud infrastructure services and maintaining and improving the Fund’s Azure platform and performance using Terraform, in a cloud first Infrastructure as Code (IaC) DevOps environment. Key duties include but are not limited to: Develop, deploy, and configure workloads to Microsoft Azure using Terraform in a DevOps environment. Developing solution designs, detailed designs, and functional design documents, ensuring designs are prepared in accordance with standards and guidelines. Develop, implement, and maintain monitoring and observability tools for managed environments. Assist with developing standards, engineering patterns, DevOps policies and IaC modules. Ensure security engineering principles are applied across Azure cloud environment including SaaS, PaaS, IaaS. Help develop and tune consumption of cloud services through succinct and effective policy implementation. Assist with reviewing technical detail designs and ensure technical designs meet functional, resilience, throughput, security, reuse, and simplicity needs. Collaborate with project technology team, architects, delivery squads, principal engineers, and project managers to meet project technology and delivery objectives. Nurture and maintain internal relationships across all levels of the Fund Operate and make decisions according to the Fund’s Policies, Standards and Procedures What You’ll Need: 5 years’ experience in technical positions, with prior technical experience working with Azure services, in a complex technical environment. Experience with Terraform and code driven pipelines using Azure DevOps Experience in scripting and automation, ideally with skills in Python, PowerShell, or Bash Understanding of security best practices and standards around cloud computing and access management Understanding of Azure policies and implementing them to enforce compliance, security, and governance using a policy-as-code deployment model Technical understanding and knowledge of Azure PaaS services, e.g. AKS, SQL DB, AML Knowledge of Active Directory and EntraID services and SSO, SAML, and OAuth In depth understanding of Azure RBAC model Highly desirable technical experience o Azure Sentinel. o Security policy design. Understanding and working knowledge of ITIL and other relevant ITSM frameworks Life at AustralianSuper AustralianSuper is committed to colleague development, and we support our people with ongoing learning, coaching and training, as well as career opportunities across our expanding global organisation. We offer generous leave entitlements and promote a blended working environment in which all roles can flex, and we’re happy to discuss what this looks like for you. We cultivate a workplace that champions safety, respect, inclusiveness and diversity. We are committed to supporting our diverse workforce in a way that is inclusive and embraces diversity in all its forms. If you require any reasonable adjustments to the recruitment process or the role, please let our recruitment team know. What’s Next Apply now, if you share our values of Energy, Integrity, Generosity of Spirit and Excellent Outcomes and would like the opportunity to work in a challenging, growing and rapidly evolving team to deliver outstanding results. Australian or New Zealand citizenship or Australian permanent residency status is required. Agencies please note: this vacancy is being managed directly by AustralianSuper’s Talent Acquisition team. We will contact our preferred agency partners should we require additional support. Thank you.