Cloud Tech Lead

Medibank Private Limited; City of Melbourne; Remote; AUD 140,000 - 190,000; Full time

Job summary

Medibank Private Limited is seeking a Cloud Technical Lead to guide the Cloud Engineering team in Melbourne. You will own AWS-based guardrails, automation and policy-driven controls to keep a large cloud estate secure, reliable and cost-efficient. Expect hands-on design, coding and cross-team collaboration with strong leadership.

The role emphasizes architecture, security, FinOps and a strong hands-on mindset, with opportunities to shape multi-account strategies and modern cloud practices.

Qualifications

• 6-7+ years of experience in AWS and cloud engineering.
• Hands-on AWS core services experience: IAM, VPC, EC2, S3, RDS, EKS.
• Experience with multi-account strategy and landing zone tooling.
• Experience implementing preventative controls and Policy as Code.
• Familiarity with CSPM tooling and Well-Architected Framework.
• Strong IaC, coding and automation skills (Terraform/CloudFormation, Python).

Responsibilities

• Design, build and maintain cloud guardrails and preventative controls for centralised governance: SCPs/RCPs, AWS Organizations, Control Tower and Policy as Code.
• Define and implement observability standards: logging, monitoring, metrics, tagging and alerting.
• Build and maintain cloud assurance and reliability frameworks across golden AMIs, backups, patching, DR, configuration compliance.
• Prioritize and drive remediation of cloud risks and security misconfigurations.
• Lead cloud security posture and maturity uplift through automation and compliance monitoring.
• Drive cloud cost optimization and FinOps practices, including cost visibility and allocation.
• Provide technical direction to other engineers and partner with teams to roll out standards.

Skills

AWS Expertise

Cloud Governance

IaC

Terraform

Python

CI/CD

Security

FinOps

Automation

Leadership

Education

AWS Certifications

Tools

Terraform

CloudFormation

Python

boto3

Bash

Jenkins

GitHub Actions

Job description

Select how often (in days) to receive an alert:

It’s a strange thing to say, because us humans are capable of incredible things. And at Medibank, we know our greatest potential lies in the people who work with us.

We strive to make real, fundamental change, driven by a simple purpose: to create the best health and wellbeing for all of Australia.

The Opportunity

As Medibank continues to invest in innovative, forward-thinking technology, we're seeking a Cloud Technical Lead for our Cloud Engineering team.

Building on the cloud is at its most impactful when reliability, security and cost work together, and that's exactly where this role lives. Reporting to the Engineering Manager, SRE & Cloud Governance, you'll provide technical leadership across our AWS infrastructure, building the guardrails, automation and standards that keep a growing cloud environment secure, reliable and efficient at scale. Our work is focused on AWS across the full range of core services, with some Azure in the mix (a plus, not essential).

This is a role for a builder.

Working across uplift and continuous improvement initiatives, you'll spend most of your time deep in the engineering, designing controls, writing automation, and turning standards into working code, while setting the technical bar through what you deliver. This is an opportunity to have real ownership, working directly on things that affect how the whole cloud environment runs, and provide hands-on leadership, influencing and setting standards.

The Responsibilities:

• Design, build and maintain cloud guardrails and preventative controls for centralised governance: SCPs/RCPs, AWS Organizations, Control Tower and Policy as Code.
• Define and implement observability standards: logging, monitoring, metrics, tagging and alerting.
• Build and maintain cloud assurance and reliability frameworks across golden AMIs, backups, patching, DR, reliability and configuration compliance.
• Prioritize and drive remediation of cloud risks and security misconfigurations, balancing urgent fixes with planned work.
• Lead cloud security posture and maturity uplift through automation and compliance monitoring, including guardrails for emerging AI services.
• Drive cloud cost optimization and FinOps practices, including cost visibility and allocation, rightsizing and anomaly detection, delivering ongoing savings.
• Provide technical direction to other engineers and partner with technical teams to roll out standards, provide guidance and gather feedback.

What we're looking for:

• 6-7+ years of experience and ideally 5+ hands-on in AWS, with proven capability across cloud engineering and governance, ideally as a Senior Engineer or Technical Lead.
• Strong hands-on AWS background across core services, including:
  • Identity & governance: IAM, Organizations, Control Tower, Config, CloudTrail
  • Networking: VPC, Transit Gateway, Route 53, security groups/NACLs
  • Compute & containers: EC2, Lambda, ECS/EKS
  • Storage & data: S3, EBS, RDS, DynamoDB
  • Security: Security Hub, GuardDuty, KMS, WAF, Firewall Manager
  • Observability: CloudWatch (Logs, Metrics, Insights), Splunk
• Experience with multi-account strategy, account vending, landing zone tooling.
• Experience implementing preventative controls, including IAM permission boundaries, Policy as Code, centralized network security (AWS Firewall Manager) and golden AMIs / hardened image pipelines (e.g. EC2 Image Builder).
• Experience with the AWS Well-Architected Framework, applying its pillars to assess and uplift cloud environments.
• Strong cloud security fundamentals (least privilege, segmentation, encryption, secrets), risk and vulnerability management, and familiarity with CSPM tooling.
• Strong IaC, coding and automation: Terraform and/or CloudFormation, Python, boto3, Bash.
• Hands-on CI/CD (e.g. Jenkins, GitHub Actions or similar) building and maintaining automated pipelines.
• Cloud FinOps experience with tools such as Cost Explorer, Compute Optimizer and Cost and Usage Reports, analysing spend and delivering savings.
• Awareness of AI governance and guardrails is a plus (e.g. Amazon Bedrock access, data protection)
• One or more relevant AWS certifications (e.g. Solutions Architect / DevOps / Security Specialty).
• Ability to provide technical leadership and own outcomes while staying hands-on day to day.

Imagine working with us

We understand that work means different things to everyone... We know happy, healthy people make great teams, and great teams put more heart into each customer and patient interaction. And that ’ s why we ’ re reinventing work.

Imagine a workplace that helps you and your family thrive. Where connection, personal development and health and wellbeing are front of mind. To learn more about our benefits go to https://careers.medibank.com.au/culture/rewards-benefits/

For you, work should help you Live Better. It should bring you fulfillment and joy. And with Medibank, it could.

Inclusion and Accessibility

We believe in everyone's potential and strive to make Medibank inclusive for all because different perspectives make us better. We encourage applications from everyone, including Aboriginal and Torres Strait Islander peoples, neurodivergent candidates, LGBTQIA+ community including transgender and gender diverse candidates and candidates with a disability.

Medibank proudly recognised as Best Enterprise Organisation, 2026 AFR BOSS Best Places to Work

Job Segment: Solution Architect, Network Security, Neurology, Developer, Cloud, Technology, Security, Healthcare

Copyright @2024 Medibank Private Limited. All rights reserved. ABN 47 080 890 259.