Lead Cloud Architect

Job Description

The context:

Scyne runs a multi-cloud environment that supports our consultants, our internal platforms and the AI capabilities we build for clients. Our business systems, including Dynamics 365, SharePoint and other SaaS applications, are connected through an integration platform built on Azure Integration Services. Day-to-day operations are delivered with a managed service provider (MSP). This role is the technical authority that makes the three clouds and the integration platform work as one secure, well-governed estate.

As the Lead Cloud Architect, you will own the design, build, security and ongoing health of Scyne's cloud platforms across Microsoft Azure, Amazon Web Services (AWS) and Google Cloud Platform (GCP), and of the integration platform that connects Scyne's business systems. This is a hands-on leadership role: you will set the architecture and guardrails, and you will also write the infrastructure code, review the changes and resolve the hard problems yourself.

You will define how workloads land in each cloud, how identity, networking, logging and security controls are applied consistently, and how changes move safely from design to production. You will maintain and uplift the existing integration platform so it is secure, observable and ready for new integrations. You will direct the MSP's work, hold them to agreed standards and service levels, and make sure that what is built matches the architecture Scyne has approved.

In this role, you will:

• Own the end-to-end cloud architecture across Azure, AWS and GCP, including landing zones, account and subscription structure, identity, networking, logging and shared services.
• Design, deploy and maintain cloud infrastructure hands-on using infrastructure as code (such as Terraform or Bicep) and CI/CD pipelines in GitHub Actions or Azure DevOps.
• Define and enforce guardrails in each cloud, such as Azure Policy, AWS Service Control Policies and Control Tower, and GCP Organisation Policies, so that secure configuration is the default.
• Lead the security posture of the cloud estate, including identity and access management, privileged access, encryption and key management, network segmentation, and vulnerability and configuration management.
• Own Scyne's integration platform on Azure Integration Services (Logic Apps, API Management, Service Bus, Azure Functions and Event Grid), keeping existing integrations reliable, secure and well supported.
• Lead the uplift of the integration platform: define the target architecture, reusable integration patterns and API standards, and deliver improvements to resilience, security, monitoring and deployment automation.
• Design and deliver new integrations between business systems such as Dynamics 365, SharePoint and other SaaS applications, applying secure authentication (managed identities, OAuth) and secrets management.
• Operate and tune cloud-native security tooling (such as Microsoft Defender for Cloud, AWS Security Hub and GuardDuty, and GCP Security Command Center) and work with the security team to act on findings.
• Orchestrate the MSP: set technical direction, review designs and change requests, approve or challenge implementation approaches, and track delivery against service levels.
• Prepare and present cloud changes at the Change Advisory Board, and ensure every change has a clear implementation, test and rollback plan.
• Align cloud controls with relevant frameworks and obligations, including the ASD Essential Eight, the Information Security Manual (ISM), ISO/IEC 27001 and CIS Benchmarks.
• Manage cloud cost and capacity, applying FinOps practices such as tagging standards, budgets, rightsizing and reserved capacity.
• Produce and maintain architecture decisions, standards, patterns and as-built documentation that others can rely on.
• Support the AI Engineering team with secure, scalable platforms for AI workloads, including model hosting, data services and workload identity.
• Lead cloud incident response and problem management with the MSP, and drive root-cause fixes.

Qualifications

Ideally, you will have some of the following:

• 10+ years' experience in infrastructure, cloud or platform engineering, including at least 5 years designing and running production workloads in public cloud.
• Hands-on, demonstrable depth in at least two of Azure, AWS and GCP, and working knowledge of the third.
• Strong infrastructure-as-code skills (Terraform preferred; Bicep, ARM or CloudFormation also valued) and experience building CI/CD pipelines in GitHub Actions or Azure DevOps.
• Proven experience designing and implementing landing zones, policy guardrails and identity models across multiple cloud tenancies.
• Hands-on experience maintaining and improving an enterprise integration platform, ideally Azure Integration Services (Logic Apps, API Management, Service Bus, Functions), including integration with Dynamics 365 or similar business systems.
• Sound knowledge of integration patterns, including REST APIs, event-driven and message-based integration, error handling, retries and monitoring.
• Solid understanding of cloud security, including Microsoft Entra ID, workload identity federation, zero trust networking, key management and security monitoring.
• Experience directing and governing a managed service provider, including change, incident and service-level management.
• Familiarity with Australian government security expectations such as the ASD Essential Eight and the ISM.
• Ability to explain technical trade-offs clearly to senior, non-technical stakeholders.
• Professional-level cloud certifications are highly desirable, such as Azure Solutions Architect Expert, AWS Certified Solutions Architect – Professional, Google Professional Cloud Architect, or cloud security certifications.
• A tertiary qualification in information technology, computer science, engineering or a related discipline is desirable.

Additional Information

• Market leading Parental Leave: Allows either carer to take 26 weeks of leave, flexibly, until a child is two years of age. A six-month minimum service requirement for new starters applies. We also make full superannuation contributions for up to 12 months (including unpaid parental leave). 
• Flex working: Our people have the autonomy to choose where and when they work so they can integrate their professional and personal lives, finding the right balance that fuels their growth, wellbeing, engagement and productivity. If it works for them, their teams, and their clients, it works for us. 
• Additional leave: a 5th week of paid leave to support rest, wellbeing, and inclusion during our annual summer shutdown also Birthday leave, First Nations Cultural Leave, Floating Public Holidays, Leave+ (purchased leave up to 12 weeks), Study Leave, Volunteering Leave, and more! 
• Smart Device reimbursement: Working flexibly means accessing the information you need on the go. That’s why we help pay for your smartphone or tablet, claiming up to $60 a month towards your bill. 
• Wellness and Lifestyle benefits: We’ll give you $295 a year to spend on items or activities that support your wellness, and up to $205 a year to support your balanced lifestyle. 
• Acacia: Our EAP provider, whose holistic suite of services promote wellbeing and proactively provide protection and support when it matters most for our people and their families.

Scyne Advisory: Our Commitment to Diversity, Inclusion, and Impact

We champion a culture of diversity, equity, and inclusion, recognising that collective intelligence and varied perspectives are crucial for delivering exceptional outcomes for Australia's public sector. We actively encourage applications from individuals within marginalised and historically underrepresented communities. Please advise us if you require any adjustments during the application process.

We are deeply passionate about improving outcomes for First Peoples, collaborating with government and community sectors on programs focused on First Nations clients, consumers, and communities. We highly value the profound knowledge, insights, capabilities, strength, resilience, and cultural competence of First Peoples.

Our recruitment process is fair and inclusive, seeking a skilled and diverse workforce reflective of the communities we serve. We consider ability, performance, potential, and alignment with our values, valuing unique experiences and contributions. Background checks and, if required, valid Commonwealth security clearances are part of our process.

For recruitment partners, please note that candidate submissions from search firms and recruiters are only accepted in alignment with a pre-existing, signed agreement for a specific position. Unsolicited resumes will not incur financial obligation.