Senior Cloud Engineer: AWS Landing Zones, IAM & FinOps

HR Partners; Melbourne; On-site; AUD 150,000 - 190,000; Full time

Job summary

Randstad Digital in Melbourne seeks a Senior Cloud Platform Engineer for a 12‑month fixed‑term role, delivering 60% project work and 40% platform governance. You will own AWS platform architecture, Landing Zones, IAM controls, and IaC automation, coordinating with MSPs to standardise enterprise cloud operations.

The ideal candidate has a senior cloud background, an active Baseline Security Clearance, and strong vendor governance experience to drive FinOps and cost efficiency across AWS and Azure.

Qualifications

• Active Baseline Security Clearance is mandatory.
• Senior platform engineering background required.
• Strong vendor governance skills required.
• Experience with AWS Landing Zones and IAM architecture desirable.

Responsibilities

• Build and refine Infrastructure as Code templates with Terraform and CloudFormation.
• Architect and implement secure AWS Landing Zones and IAM controls.
• Standardise cloud environments, workflows, and MSP delivery standards.
• Drive FinOps to optimise resource efficiency and cloud spend.
• Maintain cloud governance while working with external MSPs.

Skills

Senior cloud experience

Stakeholder management

Vendor governance

Baseline clearance

Tools

Terraform

CloudFormation

Python

PowerShell

Bash

Entra ID

Job description

We are seeking a Senior Cloud Platform Engineer to lead a 60% project driven workload focused on AWS Landing Zones, IAM architecture, IaC automation, and FinOps optimisation. You will work alongside external MSPs to standardise enterprise cloud operations. Key highlights include a heavy AWS stack (EC2, RDS, IAM) with IaC tools like Terraform and CloudFormation, alongside basic Azure/Entra ID integration. To qualify, you will bring a senior platform background, an active Baseline Security Clearance (mandatory), and strong vendor governance skills.

In this 12 month fixed term position (60% project delivery, 40% platform governance and BAU), you will take ownership of core AWS platform architecture. You will design landing zone templates, enforce robust IAM security frameworks, and drive platform standardisation across enterprise cloud systems.

Key responsibilities:

• Build and refine Infrastructure as Code (IaC) templates using Terraform and CloudFormation.
• Architect and implement secure AWS Landing Zones (Infrastructure RLS) and IAM access controls.
• Standardise cloud platform environments, operational workflows, and MSP delivery standards.
• Drive FinOps practices to optimiSe resource efficiency, performance, and cloud spend.
• Maintain cloud governance while working alongside external managed service providers.

The Tech Stack & Environment

• Primary Cloud: Heavy AWS focus (EC2, RDS, IAM, S3, Core Cloud Networking).
• Secondary Cloud: Identity and core services via Azure & Entra ID (Azure AD).
• Automation & IaC: Terraform, AWS CloudFormation, Python, PowerShell, Bash.
• Security & Governance: Landing Zones, AWS IAM, Baseline Clearance compliance.

What You'll Bring

• Extensive senior level background in cloud platform engineering and architecture.
• Advanced hands-on experience with AWS services, IAM policies, and enterprise Landing Zones.
• Strong track record building IaC templates with Terraform or CloudFormation.
• Core functional knowledge of Azure identity management (Entra ID).
• Excellent stakeholder engagement skills with experience holding MSP vendors accountable.
• An active Australian Government Baseline Security Clearance.

At Randstad Digital, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.

Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad .