The Role:.
The Cloud Architect will lead the technical design of the target-state API gateway platform. The role requires someone who can operate at the architecture level while retaining the hands-on depth to make credible design decisions about API behaviour, code patterns, and infrastructure configuration.
Key duties and responsibilities:
• Lead the design of the target-state API gateway platform architecture, key architecture artefacts like the logical architecture and physical and operations architecture.
• Define the logical request flow: how API calls traverse the gateway, including authentication, authorisation, throttling, caching, policy enforcement, and backend routing.
• Design the physical infrastructure: AWS environments, networking (VPCs, subnets, security groups), IAM roles and policies, CloudFormation/CDK infrastructure-as-code patterns, and deployment topology.
• Establish key architecture decisions (ADRs) covering platform posture, security model, operations model, and constraints.
• Define the boundary between API Gateway capabilities and the Departments existing ISF (reverse proxy), particularly around authentication, token validation, identity propagation, and trusted identifiers.
API Transition and Onboarding Patterns
• Assess existing APIs and design patterns for onboarding them onto the platform, including identifying any required code changes or refactoring.
• Design patterns for APIs that do not map cleanly to the platform, including shims, adapters, and compatibility layers that enable controlled cutover.
• Work with API owners to understand current API implementations (primarily TypeScript and C# .NET) and determine the appropriate onboarding approach for each.
Shared Runtime Patterns
• Design shared runtime patterns for cross-cutting concerns including logging, error handling, correlation, OpenAPI validation, and observability.
• Evaluate architecture options and recommend the target approach with clear trade-offs documented.
• Produce pattern catalogues and reference implementations that build teams can adopt directly.
Developer Experience and Build Enablement
• Define the target API development lifecycle: how teams will author, test, deploy, and manage APIs on API Gateway using infrastructure-as-code and CI/CD.
• Produce reusable CloudFormation/CDK templates, CI/CD pipeline patterns, and example repository structures.
• Contribute to governance automation design including OpenAPI linting, standards enforcement, and pipeline quality gates.
Skills and Experience Required:
• Deep AWS cloud architecture experience with specific hands-on expertise with API Gateways, including configuration, deployment, custom authorisers, usage plans, throttling, and caching.
• Proven experience designing and implementing API platforms at enterprise scale, with a strong understanding of API design patterns, versioning strategies, and lifecycle management.
• Strong hands-on experience with REST API development, with a background as a developer or senior engineer who has built and maintained production APIs.
• Working proficiency with TypeScript and/or C# .NET in the context of API development and middleware, sufficient to assess API implementations and identify required changes.
• Deep working knowledge of AWS IAM (roles, policies, trust relationships, cross-account access), CloudFormation and/or AWS CDK for infrastructure-as-code.
• Strong experience with AWS compute and storage services relevant to API workloads: Lambda, ECS, EKS, S3, DynamoDB, and CloudWatch.
• Experience designing CI/CD pipelines for API deployments across multiple environments, including environment promotion and rollback strategies.
• Ability to produce architecture artefacts to a standard suitable for government assurance and endorsement processes.
Location and Contract Term: This role is Sydney, Melbourne, Brisbane, Adelaide and Canberra only . 6 month contract
with 2 x 6 month contract extension options
pending budget and delegate approval.
Security Requirements: Applicants must be Australian Citizens and hold a baseline security clearance (NV1 desirable)
How to Apply:
Applications close 25 May.
Please upload your resume to apply. Candidates will need to be willing to undergo pre-employment screening checks which may include, ID and work rights, security clearance verification and any other client requested checks
Please note you may need to complete selection criteria to complete this application process. We will be in touch with instructions for suitably skilled candidates
Call Kelly 0480 002 457 or email kelly@whizdom.com.au for any further information
