MUST HAVE Active Baseline security clearance Responsibilities Design and implement AWS VPCs with strict network isolation, including subnets, route tables, NACLs, security groups, and VPC endpoints.
Define and apply IAM roles, policies, and Service Control Policies (SCPs) for secure access and compliance.
Develop and maintain Azure DevOps pipelines for automated AWS infrastructure provisioning using IaC tools (Terraform, AWS CDK, OpenTofu).
Automate deployment of networking, IAM, logging (CloudTrail, VPC Flow Logs), and monitoring components (CloudWatch, GuardDuty).
Support LiteLLM gateway deployment and implement policy and tagging strategies for cost allocation and resource tracking.
Enable secure connectivity patterns such as PrivateLink and VPC peering.
Assist with onboarding automation via AWS Service Catalog or Control Tower.
Ensure compliance with Australian Government security and cloud standards (ISM Protected).
Essential Criteria Demonstrated expertise in designing and implementing Infrastructure as Code (IaC) solutions using Azure DevOps pipelines and tools such as Terraform, AWS CDK, or OpenTofu, including complex multi-account AWS environments.
Strong knowledge of AWS networking (VPC, subnets, routing, security groups).
Proficiency in IAM policy design and SCP implementation.
Strong scripting skills for automation (Python, Bash, PowerShell).
Knowledge of pipeline security and governance practices.
Experience with multi-account AWS environments and Landing Zone architectures.
Knowledge of Australian Government cloud security and compliance requirements.
Desirable Experience with LiteLLM gateway deployment and configuration.
Exposure to hybrid and multi-cloud network engineering and secure connectivity.
Familiarity with Dynatrace observability integration and performance monitoring.
At Randstad Digital, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all.
We actively encourage applications from any background.