Platform Engineering Lead

Finstro; Sydney; On-site; AUD 180,000 - 230,000; Full time

Benefits offered by this job

Competitive compensation package

Onsite role in Sydney

Dynamic and innovative FinTech team

Job summary

Finstro is seeking a hands-on Platform Engineering Lead to own the design, security, reliability and day-to-day operation of the AWS platform and the developer experience built on top of it.

You’ll write Terraform, fix pipelines, tune alerts and lead incidents while helping the wider engineering team ship safely and quickly. The role starts as an IC with potential to build a small team as the platform matures.

Qualifications

• Hands-on AWS engineering experience across build and run
• Strong infrastructure-as-code discipline with Terraform
• Proficient CI/CD with safe release strategies
• Security-minded engineering with least-privilege and secrets
• Ability to mentor engineers and set engineering standards

Responsibilities

• Own the architecture, build and operation of the AWS platform
• Define and implement engineering standards for deployment, security and reliability
• Lead platform consolidation, production reliability and engineering foundations

Skills

AWS engineering

Infrastructure as code

CI/CD

Security mindset

Technical leadership

Communication

Tools

Terraform

GitHub Actions

GitLab CI

Jenkins

Job description

About the job

We are looking for a hands-on Platform Engineering Lead to own the design, security, reliability and day-to-day operation of Finstro’s AWS platform, as well as the developer experience built on top of it.

This is a technical leadership role where you’ll set the standards and then build them. You’ll be in the code and the console, writing Terraform, fixing pipelines, tuning alerts and leading incidents, while helping the wider engineering team ship safely and quickly.

You’ll bring structure to what exists today, define what good looks like, and turn that into documented, automated and repeatable ways of working that can scale as the organisation grows.

The role starts as a lead-by-example individual contributor, with the opportunity to build a small platform engineering team as the platform matures. The first six months will focus on platform consolidation, production reliability and establishing strong engineering foundations

About Finstro

Finstro is a fast-growing non-bank lender, providing businesses with cash flow, flexibility and confidence every step of the way. We go beyond rigid product silos and understand speed is only a part of the answer.

Since 2012, we’ve supported the growth aspirations of over 6,000 businesses through over $2.5b of funded transactions.

If you have energy, ambition and want to work for a dynamic, rapid growth, FinTech business, there are exciting opportunities to advance your career by joining our global team.

Key Skills Required

To excel in this role you'll need deep, current, hands-on AWS engineering skills and the judgement to know when to build, when to buy and when to leave something alone. You are pragmatic rather than dogmatic: you'll choose the boring, well-understood option that the team can operate over the elegant one that only you can.

You are comfortable owning production in a small organisation, diagnosing under pressure, making the call, and then fixing the underlying cause rather than the symptom. You are the final technical escalation point for the platform, and that is the part of the job you find energising rather than daunting.

You lead through credibility and working examples and write things down as a habit rather than a task at the end. You take real satisfaction in removing toil for other engineers. You can explain technical risk and trade-offs to a non-technical audience and know the difference between a control that materially reduces risk and one that simply adds process.

Key Responsibilities:

• Infrastructure ownership. Own the architecture, build and operation of Finstro’s AWS platform: compute, networking, data stores, identity and deployment environments. All new infrastructure is defined as code, with existing production brought under infrastructure-as-code management against an agreed plan. Cloud spend is understood, attributed and forecast as a first-class engineering concern.

• Security and compliance. Partner with Security and Risk to keep the platform defensible: least-privilege IAM, secrets management, patching and vulnerability remediation, network segmentation, logging and audit evidence. Build controls into the platform and delivery pipeline rather than bolting them on, in line with Finstro’s legal, regulatory and contractual obligations in each market. Security and Risk set the requirement. This role builds the controls and produces the evidence.

• Standards and technical leadership. Define, document and champion the engineering standards for how we build, deploy, run and secure services. Influence and mentor engineers without relying on formal authority. Own the platform roadmap and represent its priorities in quarterly planning.

Experience and Skills Required:

• Deep hands-on AWS as builder and operator, not only architect: Lambda, ECS and EC2, networking (VPC, subnetting, routing, DNS, load balancing), data services (RDS, S3, DynamoDB), multi-account structure and governance (AWS Organizations), identity (IAM Identity Center), with experience setting up or restructuring a multi-account environment, and cost visibility.

• Expert with infrastructure as code, ideally Terraform: module design, state management, drift detection and multi-environment promotion.

• Strong CI/CD engineering (GitHub Actions, GitLab CI, Jenkins or similar), including artefact management and familiarity with safe release strategies (blue/green, canary, rollback).

• Security-minded engineering: least-privilege IAM, secrets management, patching and vulnerability remediation within the AWS platform.

• Strong written and verbal communication, from engineers through to non-technical stakeholders and executives.

Desirable

• Experience working in a regulated or audited environment (e.g. ISO 27001, SOC 2, PCI DSS or APRA-aligned environments).
• Experience collaborating with engineering teams across different time zones

What we offer:

• Competitive compensation package including superannuation and benefits.
• Opportunity to work with cutting-edge technologies in a dynamic and innovative environment.
• Collaborative and supportive team culture.

This role is based onsite in Sydney, Australia. Candidates must be in and authorised to work in Australia.