Only applicants based in Sydney will be considered. 12 month contract We are looking for a Senior Cloud Engineer to support our client on a greenfield project. About Facto Facto is a growing Australian IT consultancy specialising in business transformation, technology enablement, and strategic advisory services. We partner with clients across a range of industries to deliver complex change programs and drive measurable outcomes. Our consultants are trusted experts who thrive in fast-paced, evolving environments. The opportunity Join the Innovation & Digital Enablement team to design, build, and operate secure, resilient cloud services that power a next-generation talent marketplace. You'll turn architectural guardrails into working cloud environments, uplift DevSecOps practices, and enable product and data teams to ship faster and safer through automation, observability, and high-quality engineering standards. What the role does Cloud architecture & engineering: Implement reference designs across AWS and GCP; build reliable, scalable foundations using serverless and container-based services (ECS Fargate, Lambda, Cloud Run) and service integrations. Cross-cloud integration: Design and operate OIDC/Workload Identity Federation (WIF) bridging between AWS and GCP — a core pattern in this environment. You'll be comfortable navigating identity and trust across cloud boundaries daily. Web infrastructure: Own and evolve DNS, CloudFront distributions, and Webflow-integrated delivery pipelines. This is a meaningful part of the role, not an afterthought. DevSecOps & automation: Stand up CI/CD pipelines with testing and security scanning; codify environments with Terraform for repeatable, compliant releases. Write Lambda and Cloud Run code in TypeScript and Python — this is an engineering role, not just infrastructure configuration. Security operations (~30% of the role): Run daily cloud posture reviews, triage security findings, manage access governance, and maintain least-privilege IAM across AWS and GCP. Security isn't a compliance checkbox here — it's embedded in the day-to-day rhythm of the role. Operations & observability: Instrument services with metrics, logs, and traces; drive availability, performance, and cost optimisation with clear runbooks. Cross-functional enablement: Collaborate with Product & Experience, Data, and engineering leads; contribute reusable templates and golden paths; support knowledge transfer across teams. What the role needs Depth of practice: ~10 years across technology/engineering; 3 years in senior cloud roles delivering production workloads. AWS and GCP strength: You are AWS-primary or deeply experienced across both AWS and GCP. Experience with cross-cloud identity patterns (OIDC, WIF) is a strong differentiator. Security operations experience: Comfortable with daily posture management, finding triage, and access governance — not just setting controls up and walking away. Technical breadth: Hands-on with serverless (Lambda, Cloud Run, ECS Fargate), CI/CD, Terraform, observability, and platform security. Able to write production-quality TypeScript and Python. Outcome mindset: Proven improvements in reliability, performance, and cost, with clear automation and quality gains. Certifications (valued): AWS or GCP architect/security credentials. Tooling & tech Cloud: AWS, GCP Compute/Platform: ECS Fargate, Lambda, Cloud Run; API gateway (AWS/Kong/Apigee); service mesh (Istio/Linkerd) IaC/CI-CD: Terraform; GitHub Actions/GitLab CI; GitOps (Argo CD/Flux) Languages: TypeScript, Python Web infrastructure: CloudFront, DNS management, Webflow Observability: Prometheus, Grafana, OpenTelemetry; alerting & runbooks Security: IAM/OIDC/WIF, secrets management (Vault/Secrets Manager), WAF; policy-as-code (OPA/Kyverno) Apply today!