Cloud Engineer

FinXL IT Professional Services; Melbourne; On-site; AUD 120,000 - 160,000; Full time

Job summary

FinXL IT Professional Services seeks a Cloud Engineer to design and build an Azure Landing Zone from scratch, aligning with CAF and Enterprise Scale Architecture. You will operate in a fast-paced environment, designing cloud foundations while workloads are migrated.

Responsibilities include IaC automation, secure network and IAM configurations, and migration of legacy ISPT services into the IFM Azure cloud. A strong background in Azure infrastructure is required.

Qualifications

• Experience designing and building Azure Landing Zones aligned with CAF.
• Proficiency in IaC with Bicep, Terraform or ARM Templates.
• Strong understanding of cloud networking, security, and IAM in enterprise environments.

Responsibilities

• Design, implement, and maintain an enterprise-scale Azure Landing Zone.
• Provision environments for workloads while migrating applications.
• Develop modular IaC for resource provisioning and governance.
• Configure networking (VNet peering, Azure Firewall, ExpressRoute/VPN, Private Endpoints).
• Manage identity/access controls via Azure AD/Entra ID.

Skills

Azure infrastructure

Azure Landing Zones CAF

IaC (Bicep/Terraform/ARM)

Network security / IAM controls

Migration in complex environments

Tools

Bicep

Terraform

ARM Templates

Azure AD/Entra ID

Job description

FinXL IT Professional Services is a leading IT consultancy that partners with clients to bridge the gap between business needs and technology capabilities. Since 2003, we've been delivering high-value ICT services across financial services, telecommunications, government, and enterprise sectors.

We are seeking a high-caliber Cloud Engineer to play a pivotal role in designing and building an Azure Landing Zone from scratch. Operating within a fast-paced environment where cloud foundation design occurs concurrently with workload migration, you will establish secure, scalable, and highly available Azure infrastructure foundations.

Key Responsibilities

• Azure Landing Zone Development: Design, implement, and maintain an enterprise-scale Azure Landing Zone adhering to the Microsoft Cloud Adoption Framework (CAF) and Enterprise Scale Architecture.
• Concurrent Workload Enablement: Build cloud architecture foundations while concurrently provisioning environments for application, database, and analytics workloads.
• Infrastructure as Code (IaC): Write and maintain modular Infrastructure as Code to automate resource provisioning, network topology, and governance policies across subscription structures.
• Network & Security Architecture: Configure core networking constructs (VNetpeering, Azure Firewall, ExpressRoute/VPN, Private Endpoints) and implement robust identity/access controls via Azure AD / Entra ID.
• Service Migration: Facilitate the architectural transition and migration of legacy ISPT services into the centralised IFM Azure cloud environment.

Required Skills

• Deep expertise in core Azure Infrastructure (Compute, Networking, Storage, Key Vault, Policy, RBAC).
• Demonstrated experience deploying Azure Landing Zones following Microsoft Cloud Adoption Framework (CAF).
• Advanced skills in Bicep, Terraform, or ARM Templates for automated infrastructure management.
• Solid understanding of cloud network security, firewalls, and enterprise Identity Access Management (IAM).
• Ability to balance foundational architecture standards with rapid delivery demands in complex migration environments.