Principal Consultant, Cloud Engineering

Principal Consultant, Cloud Engineering

The Principal Consultant, Cloud Engineering is a senior delivery and leadership role within our Cloud Security Practice, accountable for leading multi-cloud security engagements across Azure, AWS, and GCP. This role combines deep technical expertise with consulting leadership, driving the delivery of complex solutions, uplifting client environments, and mentoring engineering teams.

You will work closely with Cloud Security Architects to shape solution approaches, validate designs, and ensure practical, secure implementations. You will take ownership of delivery outcomes on major engagements from greenfield builds to enterprise-scale remediations while guiding and supporting engineering consultants to ensure delivery consistency and quality.

As a Principal Consultant, you will also play a key role in pre-sales, practice growth, and stakeholder engagement, including contributing to Statements of Work, solution demonstrations, and shaping the future direction of our cloud engineering capabilities.

As a Principal Consultant, you are accountable for:

• Leading multi-cloud security engineering engagements across Azure, AWS, and GCP, ensuring end-to-end delivery across assessments, greenfields, and uplifts.
• Acting as the primary technical lead on client projects, accountable for delivery quality, client satisfaction, and successful project outcomes.
• Overseeing and mentoring Cloud Engineering Consultants, ensuring consistent delivery practices and building capability within the practice.
• Driving adoption of automation and repeatable patterns through Infrastructure as Code (Terraform, Bicep, CloudFormation), pipelines, and engineering frameworks.
• Working directly with Cloud Security Architects to translate solution designs into delivery blueprints, advising on feasibility and delivery sequencing.
• Implementing and guiding the use of cloud-native security services such as:
• Azure - Entra ID, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Policy, Azure Monitor/Log Analytics.
• AWS - IAM, KMS, GuardDuty, Security Hub, CloudTrail, Config, CloudWatch.
• GCP - IAM, KMS, Security Command Center, VPC Service Controls, Cloud Logging/Monitoring, Chronicle.
• Leading delivery using agile ways of working (sprint planning, backlog refinement, Jira, Confluence) and ensuring alignment with ITSM practices for change, release, and incident management.
• Engaging with client stakeholders at both technical and executive levels to clearly explain risks, trade-offs, and business impacts.
• Supporting pre-sales and solution scoping activities, including proposals, SoWs, and client workshops.

To be successful in your role, you will have demonstrated and/or acquired the following knowledge and experience:

• Experience in designing and implementing Google or AWS Cloud Native Security Services is essential.
• Extensive experience in implementing and leading cloud-native security solutions across Azure, AWS, and GCP.
• Strong expertise in cloud-native services including:
• Azure - Entra ID, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Policy, Azure Monitor/Log Analytics.
• AWS - IAM, KMS, GuardDuty, Security Hub, CloudTrail, Config, CloudWatch.
• GCP - IAM, KMS, Security Command Center, VPC Service Controls, Cloud Logging/Monitoring, Chronicle.
• Relevant cloud certifications (e.g., AWS Security Specialty, GCP Professional Cloud Security Engineer, Azure Security Engineer Associate).
• Certifications or strong experience with cloud security tools such as Wiz, Tenable, Prisma Cloud, or Defender for Cloud Apps.
• Experience applying security and compliance frameworks such as Essential Eight, ISO 27001/27002, NIST CSF, CIS Benchmarks, and ISM.
• Experience in leading large-scale remediation and uplift programs, including IAM redesign, secure landing zones, and advanced monitoring/logging deployments.
• Experience with Agile/ITSM tools (Jira, Confluence, ServiceNow) and reporting on delivery progress.
• Excellent written and verbal communication skills, with the ability to engage with both technical teams and C-level stakeholders.
• Minimum of 8 - 10 years' experience in cloud security engineering and consulting.
• Prior experience in pre-sales, solution shaping, and practice development is highly desirable.

WE ENCOURAGE YOU TO APPLY

After you have applied, you will receive an email acknowledging your application. We'll then provide a personalised experience for suitable applicants as we progress the selection and assessment process. Prior to being offered employment, you will need to complete pre-employment police checks.

As a Defence security clearance is required for this role, applicants must be Australian citizens and eligible to obtain and maintain an appropriate clearance.