Lead Cloud Architect - Senior Manager

Scyne Advisory; Sydney; On-site; AUD 210,000 - 270,000; Full time

Benefits offered by this job

Parental Leave

Flexible Working

Additional Leave

Smart Device Reimbursement

Wellness Budget

Acacia EAP

Job summary

Scyne Advisory in Sydney seeks an experienced Lead Cloud Architect to own the design, security and health of hybrid cloud platforms across Azure, AWS and GCP. You will lead the MSP, write infrastructure code and set guardrails while solving hard problems hands-on.

You will define landing zones, identity and network models, enforce security controls, and deliver resilient, scalable integrations with Dynamics 365, SharePoint and other SaaS apps, partnering with security and ISM standards.

Qualifications

• 10+ years in infrastructure, cloud or platform engineering.
• Hands-on depth in at least two clouds (Azure, AWS, GCP).
• Experience with landing zones, policy guardrails and identity models.
• Experience with Azure Integration Services and Dynamics 365 integration a plus.
• Knowledge of security monitoring and cloud security best practices.

Responsibilities

• Own end-to-end cloud architecture across Azure, AWS and GCP.
• Design, deploy and maintain cloud infrastructure using IaC and CI/CD.
• Enforce guardrails and security policies to ensure secure defaults.
• Lead the MSP and ensure delivery against SLAs and architecture standards.
• Deliver secure integrations between business systems and SaaS apps.

Skills

Cloud architecture

Security governance

Infra as code

CI/CD pipelines

Azure

AWS

GCP

Landing zones

MSP governance

Education

Tertiary IT qualification

Tools

Terraform

Bicep/ARM/CloudFormation

GitHub Actions

Azure DevOps

Microsoft Defender for Cloud

AWS Security Hub

GuardDuty

GCP Security Command Center

Job description

At Scyne, we are public purpose sector specialists who support governments and their agencies, and not-for-profit organisations, to deliver services to Australians, helping to build more resilient, equitable, secure and prosperous communities. We are guided by our values of Stronger Together, Amplify Impact, Build Trusted Relationships, Value Every Person, Think Beyond Limits, and Defined by Ethics.

"Our vision is to be the public purpose specialists, helping to build more resilient, secure, equitable and prosperous communities."

Job Description

The context:

Scyne runs a multi-cloud environment that supports our consultants, our internal platforms and the AI capabilities we build for clients. Our business systems, including Dynamics 365, SharePoint and other SaaS applications, are connected through an integration platform built on Azure Integration Services. Day-to-day operations are delivered with a managed service provider (MSP). This role is the technical authority that makes the three clouds and the integration platform work as one secure, well-governed estate.

As the Lead Cloud Architect, you will own the design, build, security and ongoing health of Scyne's cloud platforms across Microsoft Azure, Amazon Web Services (AWS) and Google Cloud Platform (GCP), and of the integration platform that connects Scyne's business systems. This is a hands-on leadership role: you will set the architecture and guardrails, and you will also write the infrastructure code, review the changes and resolve the hard problems yourself.

You will define how workloads land in each cloud, how identity, networking, logging and security controls are applied consistently, and how changes move safely from design to production. You will maintain and uplift the existing integration platform so it is secure, observable and ready for new integrations. You will direct the MSP's work, hold them to agreed standards and service levels, and make sure that what is built matches the architecture Scyne has approved.

In this role, you will:

• Own the end-to-end cloud architecture across Azure, AWS and GCP, including landing zones, account and subscription structure, identity, networking, logging and shared services.
• Design, deploy and maintain cloud infrastructure hands-on using infrastructure as code (such as Terraform or Bicep) and CI/CD pipelines in GitHub Actions or Azure DevOps.
• Define and enforce guardrails in each cloud, such as Azure Policy, AWS Service Control Policies and Control Tower, and GCP Organisation Policies, so that secure configuration is the default.
• Lead the security posture of the cloud estate, including identity and access management, privileged access, encryption and key management, network segmentation, and vulnerability and configuration management.
• Own Scyne's integration platform on Azure Integration Services (Logic Apps, API Management, Service Bus, Azure Functions and Event Grid), keeping existing integrations reliable, secure and well supported.
• Lead the uplift of the integration platform: define the target architecture, reusable integration patterns and API standards, and deliver improvements to resilience, security, monitoring and deployment automation.
• Design and deliver new integrations between business systems such as Dynamics 365, SharePoint and other SaaS applications, applying secure authentication (managed identities, OAuth) and secrets management.
• Operate and tune cloud-native security tooling (such as Microsoft Defender for Cloud, AWS Security Hub and GuardDuty, and GCP Security Command Center) and work with the security team to act on findings.
• Orchestrate the MSP: set technical direction, review designs and change requests, approve or challenge implementation approaches, and track delivery against service levels.
• Prepare and present cloud changes at the Change Advisory Board, and ensure every change has a clear implementation, test and rollback plan.
• Align cloud controls with relevant frameworks and obligations, including the ASD Essential Eight, the Information Security Manual (ISM), ISO/IEC 27001 and CIS Benchmarks.
• Manage cloud cost and capacity, applying FinOps practices such as tagging standards, budgets, right-sizing and reserved capacity.
• Produce and maintain architecture decisions, standards, patterns and as-built documentation that others can rely on.
• Support the AI Engineering team with secure, scalable platforms for AI workloads, including model hosting, data services and workload identity.
• Lead cloud incident response and problem management with the MSP, and drive root-cause fixes.

Qualifications

Ideally, you will have some of the following:

• 10+ years' experience in infrastructure, cloud or platform engineering, including at least 5 years designing and running production workloads in public cloud.
• Hands-on, demonstrable depth in at least two of Azure, AWS and GCP, and working knowledge of the third.
• Strong infrastructure-as-code skills (Terraform preferred; Bicep, ARM or CloudFormation also valued) and experience building CI/CD pipelines in GitHub Actions or Azure DevOps.
• Proven experience designing and implementing landing zones, policy guardrails and identity models across multiple cloud tenancies.
• Hands-on experience maintaining and improving an enterprise integration platform, ideally Azure Integration Services (Logic Apps, API Management, Service Bus, Functions), including integration with Dynamics 365 or similar business systems.
• Sound knowledge of integration patterns, including REST APIs, event-driven and message-based integration, error handling, retries and monitoring.
• Solid understanding of cloud security, including Microsoft Entra ID, workload identity federation, zero-trust networking, key management and security monitoring.
• Experience directing and governing a managed service provider, including change, incident and service-level management.
• Familiarity with Australian government security expectations such as the ASD Essential Eight and the ISM.
• Ability to explain technical trade-offs clearly to senior, non-technical stakeholders.
• Professional-level cloud certifications are highly desirable, such as Azure Solutions Architect Expert, AWS Certified Solutions Architect - Professional, Google Professional Cloud Architect, or cloud security certifications.
• A tertiary qualification in information technology, computer science, engineering or a related discipline is desirable.

Additional Information

• Market leading Parental Leave: Allows either carer to take 26 weeks of leave, flexibly, until a child is two years of age. A six-month minimum service requirement for new starters applies. We also make full superannuation contributions for up to 12 months (including unpaid parental leave).
• Flex working: Our people have the autonomy to choose where and when they work so they can integrate their professional and personal lives, finding the right balance that fuels their growth, wellbeing, engagement and productivity. If it works for them, their teams, and their clients, it works for us.
• Additional leave: a 5th week of paid leave to support rest, wellbeing and inclusion during our annual summer shutdown also Birthday leave, First Nations Cultural Leave, Floating Public Holidays, Leave+ (purchased leave up to 12 weeks), Study Leave, Volunteering Leave, and more!
• Smart Device reimbursement: Working flexibly means accessing the information you need on the go. That's why we help pay for your smartphone or tablet, claiming up to $60 a month towards your bill.
• Wellness and Lifestyle benefits: We'll give you $295 a year to spend on items or activities that support your wellness, and up to $205 a year to support your balanced lifestyle.
• Acacia: Our EAP provider, whose holistic suite of services promote wellbeing and proactively provide protection and support when it matters most for our people and their families.

Scyne Advisory: Our Commitment to Diversity, Inclusion, and Impact

We champion a culture of diversity, equity, and inclusion, recognising that collective intelligence and varied perspectives are crucial for delivering exceptional outcomes for Australia's public sector. We actively encourage applications from individuals within marginalised and historically underrepresented communities. Please advise us if you require any adjustments during the application process.

We are deeply passionate about improving outcomes for First Peoples, collaborating with government and community sectors on programs focused on First Nations clients, consumers, and communities. We highly value the profound knowledge, insights, capabilities, strength, resilience, and cultural competence of First Peoples.

Our recruitment process is fair and inclusive, seeking a skilled and diverse workforce reflective of the communities we serve. We consider ability, performance, potential, and alignment with our values, valuing unique experiences and contributions. Background checks and, if required, valid Commonwealth security clearances are part of our process.

For recruitment partners, please note that candidate submissions from search firms and recruiters are only accepted in alignment with a pre-existing, signed agreement for a specific position. Unsolicited resumes will not incur financial obligation.

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply