Cloud & Devops Engineer (APAC)

About the Role

This is a contractor role open to candidates based in APAC.

As a Cloud / DevOps Engineer embedded within a high-impact engineering squad, you will own the cloud infrastructure, deployment pipelines, and security compliance for a major enterprise's Mobile Digital Resilience and Connected Accounts (Open Banking) platforms. In this role, you will build and maintain a cloud-agnostic, portable infrastructure foundation targeted primarily for AWS Kubernetes (EKS).

You will establish automated Terraform and Helm pipelines, enforce strict vulnerability management via Snyk, integrate enterprise secrets using HashiCorp Vault, and manage continuous delivery pipelines with LaunchDarkly feature flags for progressive beta rollouts. Additionally, you will partner closely with internal security teams to ensure project releases align with strict penetration testing lead times and enterprise security policies.

The first month of this engagement requires on-site activity in Melbourne, Australia (2–4 weeks) for context and knowledge sharing. Candidates must be open to committing to this initial travel requirement.

Most Important

• Kubernetes & AWS Orchestration: 5+ years of hands-on experience provisioning and managing production Kubernetes clusters on AWS (EKS).
• Declarative Infrastructure: Advanced proficiency with Terraform for Infrastructure as Code (IaC) and Helm for Kubernetes package management.
• Enterprise Secrets Management: Direct experience configuring and operating HashiCorp Vault in production environments.
• Continuous Delivery & Feature Control: Proven track record building CI/CD deployment pipelines utilizing LaunchDarkly (or equivalent feature flag tools) for dark launching and feature kill-switches.
• Automated Security Scanning: Hands-on experience integrating Snyk vulnerability scanning and automated patching tools directly into CI/CD pipelines.
• Security & Compliance Standards: Experience working within enterprise banking security policies and coordinating formal penetration testing engagements.
• Onsite Commitment & Location: Based in APAC with full willingness to travel to Melbourne, Australia for 2 to 4 weeks during the first month.

Nice to Have

• Multi-Cloud Readiness: Exposure to GCP infrastructure to support cloud-agnostic portability requirements.
• Workforce & Workflow Tooling: Operational familiarity with supporting Temporal orchestrations, PostgreSQL instances, or gRPC services.
• Mobile Engine Pipeline Support: Familiarity with CI pipelines supporting automated code generation tools for mobile synchronization layers.

Personal Traits

• Automation-First Mindset: Strong aversion to manual cloud console tweaks, instinctively enforcing version-controlled Terraform modules and automated infrastructure patterns.
• Security-Conscious: Uncompromising commitment to secret management and security best practices, strictly avoiding static secrets in configuration files or environment variables.
• Progressive Delivery Champion: Driven to design resilient release strategies, leveraging dark launches, canary deployments, and feature kill-switches to maintain platform stability.
• Collaborative Communicator: Ability to work closely with internal security teams, developers, and cross-functional stakeholders to balance rapid deployment with rigorous compliance.