Senior AWS Full Stack Developer (Serverless / Astro / Contentstack)

National Museum of Australia

Australian citizens only National Museum of Australia, Canberra Closes 27 Nov 2026

Eligibility - please read before applying

This role is open to Australian citizens only. Applicants must also be eligible to obtain an Australian Government security clearance.

This is an Australian Federal Government engagement based in Australia. Applications from candidates who are not Australian citizens, or who do not meet the security clearance requirement above, cannot be considered - regardless of technical experience. We are unable to sponsor visas, and this role cannot be performed remotely or from offshore.

About the Role

The National Museum of Australia is rebuilding nma.gov.au as a modern digital experience platform, moving content from Squiz Matrix and GovCMS/Drupal into Contentstack (headless CMS, AU region) with an Astro and TypeScript front end. It is seeking one Senior AWS Software Engineer (EL1 equivalent), working with standard office hours in a hybrid environment - remote considered if skills align - to design, build and operate the AWS services the site consumes: APIs on Amazon API Gateway and Lambda, visitor identity on Amazon Cognito, site and collection search on Amazon OpenSearch Service and AI services on Amazon Bedrock, plus integrations with the Museum's collection management pipeline, Tessitura and Shopify, the server-side parts of the Astro build, Contentstack APIs and migration scripting, and GitHub Actions and Contentstack Launch pipelines. The role joins an Agile/Scrum team.

APIs and identity: design, build and operate APIs on Amazon API Gateway backed by AWS Lambda and other serverless services (OpenAPI contracts, stages, custom domains,



Cognito and Lambda authorisers, usage plans, API keys, throttling, documentation); implement Amazon Cognito authentication (user pools, app clients, managed passwordless login, OIDC / OAuth 2.0 authorisation code with PKCE and client credentials, token validation in the Astro server layer, Lambda triggers, least-privilege access). Search and AI: build and tune site and collection search on Amazon OpenSearch Service (mappings, analysers, ingestion from Contentstack webhooks and collection data, aliases for zero-downtime reindexing, facets, synonyms, relevance, hybrid keyword and vector search, cost); build AI services on Amazon Bedrock (Guardrails, Knowledge Bases, RAG, logging, quotas, cost controls, output evaluation). Platform: infrastructure as code (AWS CDK, CloudFormation or Terraform) in a multi-account AWS setting with least-privilege IAM, Secrets Manager, KMS, CloudWatch and X-Ray. Integrations: the Collection Management pipeline (REST), Tessitura (REST / TNEW) and Shopify - data mapping, caching, rate limiting, error handling and monitoring. Web: server-side parts of the Astro site on Contentstack Launch; Contentstack Delivery, Management and GraphQL APIs, TypeScript SDKs, webhooks, Live Preview and Visual Builder; content and asset migration scripting, URL mapping and redirects. Delivery: GitHub Actions CI/CD across environments, code reviews,



unit / integration / contract / end-to-end tests, architecture decision records, release notes and CAB change requests, hypercare and handover; Agile ceremonies.

Key Responsibilities

- Hands-on AWS serverless: Amazon API Gateway with Lambda, OpenAPI contracts, authorisers, usage plans and throttling.
- Amazon Cognito identity: user pools, passwordless managed login, OIDC / OAuth 2.0 (PKCE, client credentials), token validation.
- Production Amazon OpenSearch Service (relevance, hybrid search, zero-downtime reindexing) and Amazon Bedrock (Guardrails, Knowledge Bases, RAG).
- Senior full stack TypeScript / Node.js with server-side rendering and REST and GraphQL APIs; Astro highly regarded, Next.js considered.
- Integrations with third-party business systems (Tessitura, Shopify, collection REST APIs) with caching, resilience and monitoring.
- Headless CMS (Contentstack preferred; Contentful or Sanity considered), GitHub Actions CI/CD and releases under formal change control.
- Infrastructure as code (CDK, CloudFormation or Terraform), least-privilege IAM, Secrets Manager, KMS, CloudWatch and X-Ray.
- Secure development and responsible, human-reviewed use of AI coding assistants.
- No security clearance required; hybrid in Canberra with remote considered.
- Demonstrated in-depth, hands‑on experience designing, building and operating APIs and identity on AWS: Amazon API Gateway with AWS Lambda, and Amazon Cognito, deployed as infrastructure as code with least‑privilege IAM and CloudWatch monitoring.
- Demonstrated hands‑on experience building search and AI services on AWS in production: Amazon OpenSearch Service and Amazon Bedrock.
- Demonstr

📌 Senior AWS Full Stack Developer (Canberra)
🏢 Axiom Data
📍 Canberra