Cloud Tech Lead: AWS Security & FinOps Leader

Medibank; Melbourne; On-site; AUD 140,000 - 190,000; Full time

Job summary

Medibank is seeking a Cloud Technical Lead to guide our AWS-centric cloud engineering team. You will design and implement governance guardrails, automation and standards to keep the cloud secure, reliable and cost-efficient at scale.

You will lead hands-on engineering, defining technical direction while maintaining day-to-day delivery, with exposure to some Azure. Strong automation, IaC and security fundamentals are essential.

Qualifications

• 6-7+ years of experience in cloud engineering and governance, with strong AWS expertise.
• Hands-on Linux/Cloud engineering background and automation experience.
• Experience implementing guardrails, IAM boundaries and Policy as Code.
• Familiarity with multi-account strategy, cost optimisation and security posture improvement.

Responsibilities

• Design, build and maintain cloud guardrails and preventative controls (SCPs/RCPs, AWS Organizations, Control Tower).
• Define and implement observability standards (logging, monitoring, metrics, tagging, alerting).
• Develop cloud assurance and reliability frameworks (golden AMIs, backups, patching, DR, configuration compliance).
• Lead remediation of cloud risks and security misconfigurations with a balance of urgency and planning.
• Drive cloud security uplift via automation and compliance monitoring, including guardrails for AI services.
• Support FinOps activities: cost visibility, Rightsizing and savings delivery.
• Provide technical direction to engineers and roll out standards across teams.

Skills

AWS

Identity governance

Networking

Compute & containers

Storage & data

Security

Observability

Policy as Code

IaC

Python

Terraform

CloudFormation

CI/CD

FinOps

AI governance

Job description

It’s a strange thing to say, because us humans are capable of incredible things. And at Medibank, we know our greatest potential lies in the people who work with us.

We strive to make real, fundamental change, driven by a simple purpose: to create the best health and wellbeing for all of Australia.

The Opportunity

As Medibank continues to invest in innovative, forward-thinking technology, we're seeking a Cloud Technical Lead for our Cloud Engineering team.

Building on the cloud is at its most impactful when reliability, security and cost work together, and that's exactly where this role lives. Reporting to the Engineering Manager, SRE & Cloud Governance, you'll provide technical leadership across our AWS infrastructure, building the guardrails, automation and standards that keep a growing cloud environment secure, reliable and efficient at scale. Our work is focused on AWS across the full range of core services, with some Azure in the mix (a plus, not essential).

This is a role for a builder. Working across uplift and continuous improvement initiatives, you'll spend most of your time deep in the engineering, designing controls, writing automation, and turning standards into working code, while setting the technical bar through what you deliver. This is an opportunity to have real ownership, working directly on things that affect how the whole cloud environment runs, and provide hands-on leadership, influencing and setting standards.

The Responsibilities:

• Design, build and maintain cloud guardrails and preventative controls for centralised governance: SCPs/RCPs, AWS Organizations, Control Tower and Policy as Code.
• Define and implement observability standards: logging, monitoring, metrics, tagging and alerting.
• Build and maintain cloud assurance and reliability frameworks across golden AMIs, backups, patching, DR, reliability and configuration compliance.
• Prioritize and drive remediation of cloud risks and security misconfigurations, balancing urgent fixes with planned work.
• Lead cloud security posture and maturity uplift through automation and compliance monitoring, including guardrails for emerging AI services.
• Drive cloud cost optimization and FinOps practices, including cost visibility and allocation, rightsizing and anomaly detection, delivering ongoing savings.
• Provide technical direction to other engineers and partner with technical teams to roll out standards, provide guidance and gather feedback.

What we're looking for:

• 6-7+ years of experience and ideally 5+ hands-on in AWS, with proven capability across cloud engineering and governance, ideally as a Senior Engineer or Technical Lead.
• Strong hands-on AWS background across core services, including:
• Identity & governance: IAM, Organizations, Control Tower, Config, CloudTrail
• Networking: VPC, Transit Gateway, Route 53, security groups/NACLs
• Compute & containers: EC2, Lambda, ECS/EKS
• Storage & data: S3, EBS, RDS, DynamoDB
• Security: Security Hub, GuardDuty, KMS, WAF, Firewall Manager
• Observability: CloudWatch (Logs, Metrics, Insights), Splunk
• Experience with multi-account strategy, account vending, landing zone tooling.
• Experience implementing preventative controls, including IAM permission boundaries, Policy as Code, centralized network security (AWS Firewall Manager) and golden AMIs / hardened image pipelines (e.g. EC2 Image Builder).
• Experience with the AWS Well-Architected Framework, applying its pillars to assess and uplift cloud environments.
• Strong cloud security fundamentals (least privilege, segmentation, encryption, secrets), risk and vulnerability management, and familiarity with CSPM tooling.
• Strong IaC, coding and automation: Terraform and/or CloudFormation, Python, boto3, Bash.
• Hands-on CI/CD (e.g. Jenkins, GitHub Actions or similar) building and maintaining automated pipelines.
• Cloud FinOps experience with tools such as Cost Explorer, Compute Optimizer and Cost and Usage Reports, analysing spend and delivering savings.
• Awareness of AI governance and guardrails is a plus (e.g. Amazon Bedrock access, data protection)
• One or more relevant AWS certifications (e.g. Solutions Architect / DevOps / Security Specialty).
• Ability to provide technical leadership and own outcomes while staying hands-on day to day.

Imagine working with us

We understand that work means different things to everyone... We know happy, healthy people make great teams, and great teams put more heart into each customer and patient interaction. And that’s why we’re reinventing work.

Imagine a workplace that helps you and your family thrive. Where connection, personal development and health and wellbeing are front of mind. To learn more about our benefits go to https://careers.medibank.com.au/culture/rewards-benefits/

For you, work should help you Live Better. It should bring you fulfillment and joy. And with Medibank, it could.

Inclusion and Accessibility

We believe in everyone's potential and strive to make Medibank inclusive for all because different perspectives make us better. We encourage applications from everyone, including Aboriginal and Torres Strait Islander peoples, neurodivergent candidates, LGBTQIA+ community including transgender and gender diverse candidates and candidates with a disability.

Medibank proudly recognised as Best Enterprise Organisation, 2026 AFR BOSS Best Places to Work