Platform Engineering Lead

Key Responsibilities

• Infrastructure ownership. Own the architecture, build and operation of Finstro’s AWS platform: compute, networking, data stores, identity and deployment environments. All new infrastructure is defined as code, with existing production brought under infrastructure-as-code management against an agreed plan. Cloud spend is understood, attributed and forecast as a first-class engineering concern.
• Security and compliance. Partner with Security and Risk to keep the platform defensible: least-privilege IAM, secrets management, patching and vulnerability remediation, network segmentation, logging and audit evidence. Build controls into the platform and delivery pipeline rather than bolting them on, in line with Finstro’s legal, regulatory and contractual obligations in each market. Security and Risk set the requirement. This role builds the controls and produces the evidence.
• Standards and technical leadership. Define, document and champion the engineering standards for how we build, deploy, run and secure services. Influence and mentor engineers without relying on formal authority. Own the platform roadmap and represent its priorities in quarterly planning.

Experience and Skills Required

• Deep hands-on AWS as builder and operator, not only architect: Lambda, ECS and EC2, networking (VPC, subnetting, routing, DNS, load balancing), data services (RDS, S3, DynamoDB), multi-account structure and governance (AWS Organizations), identity (IAM Identity Center), with experience setting up or restructuring a multi-account environment, and cost visibility.
• Expert with infrastructure as code, ideally Terraform: module design, state management, drift detection and multi-environment promotion.
• Strong CI/CD engineering (GitHub Actions, GitLab CI, Jenkins or similar), including artefact management and familiarity with safe release strategies (blue/green, canary, rollback).
• Security-minded engineering: least-privilege IAM, secrets management, patching and vulnerability remediation within the AWS platform.
• Strong written and verbal communication, from engineers through to non-technical stakeholders and executives.

Desirable

What we offer

• Competitive compensation package including superannuation and benefits.
• Opportunity to work with cutting-edge technologies in a dynamic and innovative environment.
• Collaborative and supportive team culture.
• This role is based onsite in Sydney, Australia. Candidates must be in and authorised to work in Australia.