We are looking for a Senior Cloud Engineer to support our client on a greenfield project on a 12 month contract.

About Facto

Facto is a growing Australian IT consultancy specialising in business transformation, technology enablement, and strategic advisory services. We partner with clients across a range of industries to deliver complex change programs and drive measurable outcomes. Our consultants are trusted experts who thrive in fast-paced, evolving environments.

The prospect

Join the Innovation & Digital Enablement team to design, build, and operate secure, resilient cloud services that power a next-generation talent marketplace. You'll turn architectural guardrails into working cloud environments, uplift DevSecOps practices, and enable product and data teams to ship faster and safer through automation, observability, and high-quality engineering standards.

What the role does

- Cloud architecture & engineering: Implement reference designs across AWS and GCP; build reliable, scalable foundations using serverless and container-based services (ECS Fargate, Lambda, Cloud Run) and service integrations.
- Cross-cloud integration: Design and operate OIDC/Workload Identity Federation (WIF) bridging between AWS and GCP — a core pattern in this environment. You'll be comfortable navigating identity and trust across cloud boundaries daily.
- Web infrastructure: Own and evolve DNS, CloudFront distributions, and Webflow-integrated delivery pipelines. This is a meaningful part of the role, not an afterthought.
- DevSecOps & automation: Stand up CI/CD pipelines with testing and security scanning; codify environments with Terraform for repeatable, compliant releases. Write Lambda and Cloud Run code in TypeScript and Python — this is an engineering role, not just infrastructure configuration.
- Security operations (~30% of the role):



Run daily cloud posture reviews, triage security findings, manage access governance, and maintain least-privilege IAM across AWS and GCP. Security isn't a compliance checkbox here — it's embedded in the day-to-day rhythm of the role.
- Operations & observability: Instrument services with metrics, logs, and traces; drive availability, performance, and cost optimisation with clear runbooks.
- Cross-functional enablement: Collaborate with Product & Experience, Data, and engineering leads; contribute reusable templates and golden paths; support knowledge transfer across teams.

What the role needs

- Depth of practice: ~10 years across technology/engineering; 3+ years in senior cloud roles delivering production workloads.
- AWS and GCP strength: You are AWS-primary or deeply experienced across both AWS and GCP. Experience with cross-cloud identity patterns (OIDC, WIF) is a strong differentiator.
- Security operations experience: Comfortable with daily posture management, finding triage, and access governance — not just setting controls up and walking away.
- Technical breadth: Hands-on with serverless (Lambda, Cloud Run, ECS Fargate), CI/CD, Terraform, observability, and platform security. Able to write production-quality TypeScript and Python.
- Outcome mindset: Proven improvements in reliability, performance, and cost, with clear automation and quality gains.
- Certifications (valued): AWS or GCP architect/security credentials.

Tooling & tech

- Cloud: AWS, GCP
- IaC/CI-CD: Terraform; GitHub Actions/GitLab CI; GitOps (Argo CD/Flux)
- Languages: TypeScript, Python
- Web infrastructure: CloudFront, DNS management, Webflow
- Observability: Prometheus, Grafana, OpenTelemetry; alerting & runbooks
- Security: IAM/OIDC/WIF, secrets management (Vault/Secrets Manager), WAF; policy-as-code (OPA/Kyverno)

#J-18808-Ljbffr

📌 Senior Cloud Engineer (City of Sydney)
🏢 Facto
📍 City of Sydney