Principal Consultant, Cloud Engineering

At Thales, we know technology has the ability to make our world more secure, sustainable, and inclusive – and that it's all driven by human intelligence.

Because it takes human intelligence to build and power the systems and solutions that people depend on every day. So we stay curious and make space for diverse points of view. We share what we know and we challenge what's possible.

From manufacturing and engineering to cybersecurity and space, we're driving progress in some of the world's most important industries – and working together to build a future we can all trust.

About Thales

At Thales, we know technology can make our world more secure, sustainable, and inclusive – and that it's all driven by human intelligence.

Because it takes human intelligence to build and power the systems and solutions that people depend on every day. So we stay curious and make space for diverse points of view. We share what we know and we challenge what's possible.

From manufacturing and engineering to cybersecurity and space, we're driving progress in some of the world's most important industries – and working together to build a future we can all trust.

Thales delivers cybersecurity products and services that keep people and assets safe, giving organisations confidence in the security of their digital journeys. Our solutions are deployed in 148 countries, helping governments to maintain sovereignty, and organisations to preserve their strategic autonomy. Thales is a global leader in cybersecurity - no.1 in data security - with 6,000+ experts and developers. We bring trust and resilience to key industries including finance, health, retail and manufacturing, as well as vital sectors such as aerospace, critical infrastructure, defence and space.
 

About the Role

The Principal Consultant, Cloud Engineering is a senior delivery and leadership role within our Cloud Security Practice, accountable for leading multi-cloud security engagements across Azure, AWS, and GCP. This role combines deep technical expertise with consulting leadership, driving the delivery of complex solutions, uplifting client environments, and mentoring engineering teams.

You will work closely with Cloud Security Architects to shape solution approaches, validate designs, and ensure practical, secure implementations. You will take ownership of delivery outcomes on major engagements from greenfield builds to enterprise-scale remediations while guiding and supporting engineering consultants to ensure delivery consistency and quality.

As a Principal Consultant, you will also play a key role in pre-sales, practice growth, and stakeholder engagement, including contributing to Statements of Work, solution demonstrations, and shaping the future direction of our cloud engineering capabilities.

As a Principal Consultant, you are accountable for:

• Leading multi-cloud security engineering engagements across Azure, AWS, and GCP, ensuring end-to-end delivery across assessments, greenfields, and uplifts.

• Acting as the primary technical lead on client projects, accountable for delivery quality, client satisfaction, and successful project outcomes.

• Overseeing and mentoring Cloud Engineering Consultants, ensuring consistent delivery practices and building capability within the practice.

• Driving adoption of automation and repeatable patterns through Infrastructure as Code (Terraform, Bicep, CloudFormation), pipelines, and engineering frameworks.

• Working directly with Cloud Security Architects to translate solution designs into delivery blueprints, advising on feasibility and delivery sequencing.

• Implementing and guiding the use of cloud-native security services such as:

  • Azure - Entra ID, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Policy, Azure Monitor/Log Analytics.

  • AWS - IAM, KMS, GuardDuty, Security Hub, CloudTrail, Config, CloudWatch.

  • GCP - IAM, KMS, Security Command Center, VPC Service Controls, Cloud Logging/Monitoring, Chronicle.

• Leading delivery using agile ways of working (sprint planning, backlog refinement, Jira, Confluence) and ensuring alignment with ITSM practices for change, release, and incident management.

• Engaging with client stakeholders at both technical and executive levels to clearly explain risks, trade-offs, and business impacts.

• Supporting pre-sales and solution scoping activities, including proposals, SoWs, and client workshops.

About You

To be successful in your role, you will have demonstrated and/or acquired the following knowledge and experience:

• Experience in designing and implementing Google or AWS Cloud Native Security Services is essential.

• Extensive experience in implementing and leading cloud-native security solutions across Azure, AWS, and GCP.

• Strong expertise in cloud-native services including:

  • Azure - Entra ID, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Policy, Azure Monitor/Log Analytics.

  • AWS - IAM, KMS, GuardDuty, Security Hub, CloudTrail, Config, CloudWatch.

  • GCP - IAM, KMS, Security Command Center, VPC Service Controls, Cloud Logging/Monitoring, Chronicle.

  • Relevant cloud certifications (e.g., AWS Security Specialty, GCP Professional Cloud Security Engineer, Azure Security Engineer Associate).

• Certifications or strong experience with cloud security tools such as Wiz, Tenable, Prisma Cloud, or Defender for Cloud Apps.

• Experience applying security and compliance frameworks such as Essential Eight, ISO 27001/27002, NIST CSF, CIS Benchmarks, and ISM.

• Experience in leading large-scale remediation and uplift programs, including IAM redesign, secure landing zones, and advanced monitoring/logging deployments.

• Experience with Agile/ITSM tools (Jira, Confluence, ServiceNow) and reporting on delivery progress.

• Excellent written and verbal communication skills, with the ability to engage with both technical teams and C-level stakeholders.

• Minimum of years' experience in cloud security engineering and consulting.

• Prior experience in pre-sales, solution shaping, and practice development is highly desirable.

WE ENCOURAGE YOU TO APPLY

After you have applied, you will receive an email acknowledging your application. We'll then provide a personalised experience for suitable applicants as we progress the selection and assessment process. Prior to being offered employment, you will need to complete pre-employment police checks.

As a Defence security clearance is required for this role, applicants must be Australian citizens and eligible to obtain and maintain an appropriate clearance.  To learn more about clearances please visit –
 

#LI-PG1

It's easy to dismiss the perfect opportunity if you don't see yourself as the perfect fit. If this role feels right – no matter your background or personal circumstances – please introduce yourself or join our community. We're committed to supporting a diverse workplace, and that starts here.

We're proud to be endorsed by WORK180 as an Employer for All Women, but we know there's always more we can do. We'll continue to foster industry partnerships, employee resource groups (ERGs) and development opportunities to make Thales a genuinely equitable employer, for everyone.

Read more about our WORK180 endorsement.