Summary (Key Skills & Role): · Authoring and deploying PowerShell DSC configurations for VM baseline enforcement; onboarding target VMs to Azure Automation State Configuration; drift detection, remediation and compliance reporting· Azure Policy: Design and assignment of custom and built-in policy definitions across target subscriptions; remediation task configuration for non-compliant resources; policy exemption governance and documentation.
· Stakeholder engagement to map integration points, upstream/downstream dependencies, and any SLA or latency sensitivities that may influence the remediation approach· Terraform: Design and build of Terraform modules for approved Azure resource types; state file management via Azure Storage backend; integration with existing naming conventions, tagging standards, and landing zone patterns· Automation of all remediation changes using Terraform, with deployment orchestrated through Azure DevOps pipelines.
· Testing and validation of each remediated service to confirm connectivity, expected behavior, and firewall rule compliance post-change· Documentation of the final-state architecture, DSC changes, design revision and runbooks for ongoing operational support· Handover and knowledge transfer to the AustralianSuper Cloud Services team • Develop standards, engineering patterns, DevOps policies and IaC modules.
• Set the standard approach project engineering teams will take in their infrastructure delivery work.
• Develop, deploy, and configure workloads to Microsoft Azure using Terraform in a DevOps setting.
• Develop solution, detailed and functional design documents, ensuring designs are prepared in accordance with standards and guidelines.
• Develop, implement, and maintain monitoring and observability tools for managed environments.
• Engage in hands-on development to balance workload or address significant complexity through technical spike: build, test including non-functional areas like security,



reliability, and performance.
• Review technical detail designs and ensure technical designs meet functional, resilience, security, reuse, and operational needs• Collaborate with project/ BAU teams including architects, delivery squads, principal engineers, and project managers to meet the project technology and delivery objectives• Design technology solutions to automate existing processes using DevOps.
• Contribute towards the Fund's central knowledge repository for design models and patterns.
• Provide technical leadership and ensure alignment of cloud solutions to target architecture, standards, and best practices.
• Collaborate with other technology teams, assisting with the demands of operations as required, and empowering teams to enable reliability, resilience, and supportability of platformsEssential: • 8-10+ years' experienceworking in medium to large IT environments.
• 4 years working with AzurePublic Cloud services designing and building cloud solutions using IaaS andPaaS services, with in depth understanding of cloud products and offerings.
• Cloud Service Proficiency:In-depth knowledge of Azure cloud platform.
Understanding how to leveragedifferent services for computing, storage, database management, and networkingis crucial.
• Experience developing andadopting DevSecOps strategy and ways-of-working.
• Hands on deployingapplications and building infrastructure in cloud via Azure DevOps CI/CDdeployment pipelines.
• Experience in scripting andautomation: Skills in Python, PowerShell, Bash or similar.
• Hands on withInfrastructure-as-Code and experience provisioning resources using TerraformOSS.
• Knowledge of containerframeworks, Docker and Kubernetes.
• Deep knowledge of runningIaaS workloads and design/operation of Azure Backup and Azure Monitor for IaaSworkloads.
• In-depth understanding ofAzure policies and implementing them to enforce compliance, security, andgovernance using a policy-as-code deployment model

📌 Senior Cloud Engineering (Melbourne)
🏢 XPT Software Australia Pty
📍 Melbourne