Role: AWS Infrastructure Engineer

Work location: REMOTE (Australia)

Role type: Contract

Requirement: Active Baseline Security Clearance

Responsibilities:

• Design and implement AWS VPCs with strict network isolation, including subnets, route tables, NACLs, security groups, and VPC endpoints.
• Define and apply IAM roles, policies, and Service Control Policies (SCPs) for secure access and compliance.
• Develop and maintain Azure DevOps pipelines for automated AWS infrastructure provisioning using IaC tools (Terraform, AWS CDK, OpenTofu).
• Automate deployment of networking, IAM, logging (CloudTrail, VPC Flow Logs), and monitoring components (CloudWatch, GuardDuty).
• Support LiteLLM gateway deployment and implement policy and tagging strategies for cost allocation and resource tracking.
• Enable secure connectivity patterns such as PrivateLink and VPC peering.
• Assist with onboarding automation via AWS Service Catalog or Control Tower.
• Ensure compliance with Australian Government security and cloud standards (ISM Protected).

Essential Criteria:

• Demonstrated expertise in designing and implementing Infrastructure as Code (IaC) solutions using Azure DevOps pipelines and tools such as Terraform, AWS CDK, or OpenTofu, including complex multi-account AWS environments.
• Strong knowledge of AWS networking (VPC, subnets, routing, security groups).
• Proficiency in IAM policy design and SCP implementation.
• Strong scripting skills for automation (Python, Bash, PowerShell).
• Knowledge of pipeline security and governance practices.
• Experience with multi-account AWS environments and Landing Zone architectures.
• Knowledge of Australian Government cloud security and compliance requirements.