Cloud Architect - AWS

Peoplebank; Geelong; Hybrid; AUD 185,000 - 216,000; Full time

Job summary

Peoplebank is seeking a Principal AWS Landing Zone Architect for a VIC Government organisation based in Geelong. The role will own target architecture, provide hands-on technical leadership, and drive multi-account AWS foundations, security, compliance and delivery across product teams.

The ideal candidate has 7+ years AWS architecture experience, strong Terraform/IaC skills, and a track record delivering landing zones in regulated environments. Hybrid work with in-office 3 days per week.

Qualifications

• 7+ years AWS architecture experience.
• Led at least two enterprise AWS multi-account landing zones from discovery to handover.
• Delivered landing zones in regulated/government/financial services environments.
• Strong Terraform and automation capability with reusable modules, testing, and CI/CD pipelines.
• Excellent stakeholder leadership and communication skills.

Responsibilities

• Lead AWS Landing Zone architecture, governance, standards and roadmap.
• Design multi-account OU structure, SCPs, identity and AWS governance.
• Engage with Cyber, Network, Identity, Risk, Operations and Delivery teams.
• Lead Terraform/IaC, CI/CD, networking, Direct Connect, Transit Gateway, VPC & DNS.
• Define security, logging, monitoring, DR, encryption and operational controls.

Skills

AWS architecture

Terraform

CI/CD

Security & governance

Leadership

Tools

AWS Control Tower

Git-based delivery

Job description

• Rate ranges from $1000/day to $1170/day Incl super
• VIC Government organisation

• Cloud Architect - AWS
• Location: Geelong
• Hybrid, 3 days per week in office
• 6 months Contract with view to extend
• Rate ranges from $1000/day to $1170/day Incl super
• VIC Government organisation

About the Role

Client is strengthening its enterprise cloud foundations as part of a broader hybrid and multi-cloud strategy. The Principal AWS Landing Zone Architect will own the target architecture and provide hands-on technical leadership through implementation, assurance and transition into operations.

The role requires someone who has previously built enterprise AWS landing zones at scale and can translate security, compliance, networking, identity, delivery and operational requirements into a practical platform that product teams can consume safely.

What success looks like in the role

• Approved AWS target architecture covering identity, networking, security, logging, resilience and cost governance.
• Multi-account AWS foundation using Organizations & Control Tower with automated account onboarding.
• Automated deployment using Terraform/IaC, version control and CI/CD.
• Built-in security & compliance with central monitoring, logging and evidence.
• Clear operating model covering ownership, support, lifecycle and governance.
• Reusable AWS patterns & documentation for fast, secure workload adoption.

Key Accountabilities

Architecture Ownership

• Lead AWS Landing Zone architecture, governance, standards and roadmap.
• Design multi-account, OU structure, SCPs, identity and AWS governance.
• Engage with Cyber, Network, Identity, Risk, Operations and Delivery teams.

Technical Design & Delivery

• Lead AWS Control Tower, Organizations, IAM Identity Center & Account Factory.
• Design Terraform/IaC, CI/CD, networking, Direct Connect, Transit Gateway, VPC & DNS.
• Define security, logging, monitoring, DR, encryption and operational controls.

Required experience

• Significant experience in senior infrastructure, platform or cloud engineering and architecture roles, including substantial recent AWS architecture experience, typically seven years or more.
• Personal leadership of at least two enterprise AWS multi-account landing zone implementations from discovery and detailed design through build, workload onboarding and operational handover.
• At least one landing zone delivered in a regulated, government, financial services, health, insurance or similarly complex environment.
• Deep hands-on knowledge of AWS Organizations, AWS Control Tower, account vending, organisational unit design, service control policies and delegated administration.
• Strong Terraform and automation capability, including reusable modules, testing, Git-based delivery and CI/CD pipelines. The candidate must be able to review implementation quality, not only produce diagrams.
• Strong enterprise networking knowledge spanning hybrid connectivity, routing, DNS, IP address management, network security and traffic inspection.
• Strong cloud security architecture knowledge across identity, encryption, key management, central logging, threat detection, security monitoring, vulnerability management and audit evidence.
• Demonstrated ability to define platform operating models, technical standards, support boundaries, workload onboarding and FinOps controls.
• Excellent stakeholder leadership and communication skills, including the ability to explain complex architecture decisions and trade-offs to senior non-technical stakeholders.

Highly desirable

• AWS Certified Solutions Architect - Professional. Certification is valued but is not a substitute for delivery evidence.
• Experience integrating AWS with Microsoft Entra ID, enterprise SIEM platforms, service management tooling and on-premises security controls.
• Experience with AWS Account Factory for Terraform, Control Tower customisation and automated policy deployment.
• Experience aligning technical controls to Australian government or regulated-industry frameworks such as the ISM, Essential Eight, VPDSF, ISO 27001 or NIST CSF.
• Experience establishing AWS foundations within a broader hybrid or multi-cloud environment.

Keywords for Search - Principal AWS Architect, AWS Cloud Architect, AWS Solutions Architect, Principal Cloud Architect, Cloud Platform Architect, AWS Platform Architect,AWS Landing Zone Architect,AWS DevOps Architect

Peoplebank and Leaders IT are committed to creating a diverse and inclusive workplace where everyone belongs. We welcome applications from people of all backgrounds, identities, and experiences. If you need adjustments to the recruitment process due to your circumstances, please let us know—we’re here to support you.