Cloud DevOps Engineer

HCLTech - Australia and New Zealand; Sydney; Presencial; AUD 140.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Diversity

Global teams

Virtual-first culture

Benefits package

Descripción de la vacante

HCLTech is seeking an experienced Cloud DevOps / DevSecOps Engineer to secure and scale cloud platforms in AWS and Microsoft Azure. You will work across Cloud, DevOps, Infrastructure, Architecture, Development, and Cyber Security teams to implement security controls, governance, and compliant cloud environments.

Responsibilities include building secure CI/CD pipelines, managing secrets and encryption keys, and implementing automated remediation with policy-as-code.

Formación

• Experience with AWS and Azure cloud environments in enterprise settings.
• Experience with Azure DevOps Pipelines and DevSecOps practices.
• Hands-on with Terraform / IaC.

Responsabilidades

• Design, implement, and maintain secure cloud environments across AWS and Azure.
• Implement and manage cloud-native security services (Security Hub, GuardDuty, Config, Defender, Sentinel, and Azure Policy).
• Embed security into Azure DevOps CI/CD pipelines with hardening and vulnerability scanning.
• Implement secure secrets, certificates, encryption keys, and automated credential rotation.
• Identify, assess, and remediate vulnerabilities across cloud infra, OS, containers, and apps.
• Maintain IAM, RBAC, PAM, Conditional Access, Zero Trust, and least-privilege models.
• Manage network security controls including firewalls, WAF, DNS security, and NSGs/SGs.
• Develop guardrails, policy-as-code, baselines, and automated remediation across AWS/Azure.
• Build secure cloud infra using Terraform and IaC practices.
• Support security monitoring, threat management, and incident response.
• Collaborate with agile, devops, architecture, and security teams.

Conocimientos

AWS

Azure

Azure DevOps

Terraform

DevSecOps

CI/CD

Security

IAM & Zero Trust

Vulnerability mgmt

Policy as code

Herramientas

AWS Security Hub

GuardDuty

Azure Key Vault

Secrets Manager

Azure Policy

Terraform

Qualys

CrowdStrike

Microsoft Defender

Descripción del empleo

We are HCLTech, one of the fastest-growing large tech companies in the world and home to 219,000+ people across 54 countries, supercharging progress through industry-leading capabilities centered around Digital, Engineering and Cloud.

The driving force behind that work, our people, are diverse, creative, and passionate, raising the bar for excellence on a regular basis. We, in turn, work hard to bring out the best in them as we strive to help them find their spark and become the best version of themselves that they can be.

Are you ready to be an important part of this ever-transformational journey?

Location : Sydney

Employment Type Contract - 12 months Fixed Term Contract

Role Overview

We are looking for an experienced Cloud DevOps / DevSecOps Engineer with strong expertise across AWS and Microsoft Azure environments. The ideal candidate will have hands-on experience in cloud security, DevSecOps, CI/CD security, Infrastructure as Code, vulnerability management, IAM, security monitoring, and automated security controls.

You will work closely with Cloud, DevOps, Infrastructure, Architecture, Development, and Cyber Security teams to build and maintain secure, scalable, and compliant cloud platforms.

Key Responsibilities

• Design, implement, and maintain secure cloud environments across AWS and Azure, covering security architecture, governance, compliance, security posture management, and security controls.
• Implement and manage cloud-native security services including AWS Security Hub, Amazon GuardDuty, AWS Config, Microsoft Defender for Cloud, Microsoft Sentinel, and Azure Policy.
• Embed security into Azure DevOps CI/CD pipelines, including pipeline hardening, secure build and release processes, code signing, vulnerability scanning, secrets management, and software supply chain security.
• Implement secure secrets, certificates, encryption keys, and automated credential rotation using Azure Key Vault, AWS Secrets Manager, and HSM-backed solutions.
• Identify, assess, prioritise, and remediate vulnerabilities across cloud infrastructure, operating systems, containers, and applications using tools such as Qualys, CrowdStrike, Prisma Cloud, Microsoft Defender, and AWS Security Hub.
• Implement and maintain IAM, RBAC, PAM, Conditional Access, Zero Trust, and least-privilege access models.
• Manage network and infrastructure security controls including firewalls, WAF, DDoS protection, network segmentation, private connectivity, DNS security, Azure Network Security Groups, and AWS Security Groups.
• Develop and maintain cloud security guardrails, policy-as-code, security baselines, compliance controls, and automated remediation across AWS and Azure environments.
• Build and maintain secure cloud infrastructure using Terraform and Infrastructure as Code practices.
• Support security monitoring, threat management, compliance reporting, incident response, and remediation activities across enterprise cloud environments.
• Collaborate with Agile, DevOps, Cloud Engineering, Architecture, Infrastructure, and Cyber Security teams to integrate security throughout the technology delivery lifecycle.

Required Skills & Experience

• Strong hands-on experience with AWS and Microsoft Azure cloud environments.
• Strong knowledge of cloud security architecture, governance, compliance, and security posture management.
• Experience with Azure DevOps Pipelines and DevSecOps practices.
• Hands-on experience with Terraform / Infrastructure as Code.
• Strong knowledge of cloud-native security tools including:
• Microsoft Sentinel
• AWS Security Hub
• Amazon GuardDuty
• AWS Config
• Experience with vulnerability and security platforms such as Qualys, CrowdStrike, Prisma Cloud, and Microsoft Defender.
• Strong knowledge of IAM, RBAC, PAM, Zero Trust, Conditional Access, and least-privilege principles.
• Experience with Azure Key Vault, AWS Secrets Manager, encryption, certificates, HSMs, and key management.
• Good understanding of WAF, firewalls, DDoS protection, network segmentation, DNS security, NSGs, Security Groups, and hybrid cloud connectivity.
• Strong understanding of security monitoring, threat detection, incident response, vulnerability remediation, and compliance reporting.
• Experience working in large‑scale enterprise Cloud, DevOps, or Security Engineering environments.

Why Us

We are one of the fastest-growing large tech companies in the world, with offices in 50+ countries across the globe and 219,000 employees

• Our company is extremely diverse with 165 nationalities represented
• We offer the opportunity to work with colleagues across the globe
• We offer a virtual-first work environment, promoting a good work-life integration and real flexibility
• We offer comprehensive benefits for all employees
• We are a certified great place to work and a top employer in 17 countries, offering a positive work environment that values employee recognition and respect

Equality & Opportunity for All

Representing 165 nationalities across the globe, we pride ourselves on being an equal opportunity employer, committed to providing equal employment opportunities to all applicants and employees regardless of race, religion, sex, colour, age, national origin, pregnancy, sexual orientation, physical disability or genetic information, military or veteran status, Aboriginal and Torres Strait Islander people or any other protected classification, in accordance with federal, state, and/or local law.

Candidate Data Privacy Notice | HCL Technologies

We are committed to respecting your privacy and for the protection of your personal data. Your personal data will be collected and processed in line with our candidate privacy notice: https://www.hcltech.com/candidate-privacy-notice. This privacy notice will help you to understand what personal data we collect about you, how we use this personal data, and what rights you have regarding your personal data. By replying to this email or submitting any personal data to HCLTech, you acknowledge that you have read and understood the candidate privacy notice and have provided your consent to the processing of your data for recruitment purposes as described in the privacy notice”.