Cloud Infrastructure Engineer

Kōrero mō te tūranga - About the role

We are looking for a permanent  Cloud Infrastructure Engineer to join our Charts and Mapping Squad (CAMS) at Toitū Te Whenua.

New Zealand's maritime safety and navigational accuracy depend on world-class hydrographic data and nautical charts. As our Cloud Infrastructure Engineer, you will play a critical role in modernising how Toitū Te Whenua processes bathymetric survey data, produce nautical charts, generate Electronic Navigational Charts (ENCs) or manages Notices to Maritimers that keep our waters safe for navigation.

You'll be working on the technical migration of our Hydrographic Systems from on-premises infrastructure to AWS cloud, establishing a secure, scalable platform that enables our hydrographic team to work effectively. But migration is just the beginning—your real value will be in partnering with our squads to continuously improve our systems, automate workflows, and build reliable, performant infrastructure that adapts to evolving needs.

Your work contributes to New Zealand's maritime safety. The hydrographic data and nautical charts our team produces are used by commercial vessels, recreational boaters, emergency services, and maritime authorities to navigate our waters safely. By building reliable, performant solutions, you enable our hydrographic specialists to focus on their core mission: ensuring New Zealand's nautical information is accurate, current, and accessible.

You'll join a highly collaborative squad that values technical excellence, continuous learning, and meaningful impact. We're looking for someone who sees infrastructure as enabling capability, not just managing services—someone who gets excited about solving real problems for real users.

He pūkenga tou - Skills & Experience

AWS Experience

• Proven experience designing and managing AWS production environments with strong understanding of cloud architecture, security, governance, and best practices
• Hands-on experience with AWS RDS PostgreSQL, AppStream 2.0 (desirable), EC2, Fargate, VPC, S3, IAM, CloudWatch
• Experience implementing disaster recovery strategies in AWS, including cross-region replication
• Proficiency with Infrastructure-as-Code using AWS CDK, CloudFormation, or Terraform
• Cost optimisation in AWS environments

Database & Data Management

• Strong PostgreSQL administration skills including performance tuning, backup/recovery, replication, and maintenance
• Experience with PostGIS or other geospatial database extensions
• Understanding of data pipeline design and implementation

Identity & Security

• Experience with Microsoft Entra ID (Azure AD) SAML federation with AWS services
• Strong understanding of AWS IAM, role-based access control, and security best practices
• Experience with network security, VPC configuration, security groups, and network isolation

DevOps & Automation

• Solid understanding of DevOps principles with hands-on experience implementing CI/CD pipelines
• Demonstrated Python development experience for automation, scripting, and tooling
• Experience with monitoring, logging, and observability practices

Working Approach

• Ability to lead and self-manage your work, taking ownership from conception to completion
• Experience managing work across multiple business areas and stakeholder groups
• Strong collaboration skills with ability to work effectively in a small, cross-functional team
• Excellent communication skills for engaging with technical and non-technical stakeholders
• Problem-solving mindset with focus on pragmatic, outcome-driven solutions

Highly Desirable

• Experience supporting AWS AppStream and Workspace environments for application delivery
• Ability to develop and communicate clear technical roadmaps
• Experience with geospatial software systems (CARIS, ESRI, QGIS, or similar)
• Understanding of ITIL practices and service management frameworks
• Experience working in agile, multi-team environments with continuous improvement focus
• Background in hydrographic, maritime, or geospatial domains

The annual full-time salary range for this role is between $120,000 to $150,000 depending on skills and experience.

Ngā mea e tukuna ana e tātau - What we offer our employees

• Interesting work which impacts Aotearoa as we care for whenua, moana and arawai.
• Wellbeing allowance reimbursement
• Ability to purchase additional leave
• Annual Flu Vaccinations
• Reduced Health Insurance Premiums
• Diverse groups and networks
• If eligible for paid parental leave, you will be entitled to a top up payment for the first 18 weeks of the 26 weeks.
• A minimum of four weeks and three days annual leave

Te Tākinatanga - Our Story

Toitū Te Whenua plays a vital role in understanding, developing, and caring for New Zealand's whenua, moana and arawai (land, sea and waterways). Whether you're developing our products and services to support our customers, managing the Crown estate, engaging with our iwi partners, or helping us be an effective regulator, your contribution can make a difference. Our mahi helps New Zealanders have confidence that the development of our land, communities and country is being planned from an informed and expert position that balances environmental, social, cultural, and economic considerations, now and for future generations.

Our Kia Toipoto Intentions - Public Service Gender, Māori, Pacific and Ethnic Pay Gap Action Plan

Toitū Te Whenua is a diverse team of individuals with different experience and perspectives. This drives our culture and high performance.  We know that people from underrepresented groups and women in particular don't apply for roles if they're not a 100% match, but we're not looking for perfection, we're looking for potential.  As an inclusive and supportive employer, we value difference and want to encourage anyone interested to apply, regardless of whether you tick all the boxes or not. As an organisation we embrace diversity, encourage work life balance and have a flexible approach to the way we work which means you will quickly feel connected and valued.

Tono mai - How to Apply

If you're eyeing up this role and believe you've got what it takes, please apply, or get in touch with the team.

To apply, please click "Apply Online." You'll be taken through to our Toitū Te Whenua Careers Centre where you'll be able to review further information about the responsibilities and accountabilities of this role in the Position Description. You'll be able to complete your online application form and upload a copy of your CV/Cover Letter.

Please note, while applications close on Tuesday 4 November 2025, we may be reviewing applications as they are received and may progress with suitable applicants prior to the application closing date. Therefore, please apply as soon as possible if you are interested in this position.

For tracking and evaluation purposes, all applications must be submitted via our on-line process. You must have the legal right to live and work in New Zealand to be eligible for this position.

You may notice that the Position Description title for this role (Digital Specialist - Level Toru/3) doesn't match the advertised title.  At Toitū Te Whenua we design our roles around shared capabilities (rather than focusing on tasks). This means our position descriptions are broad, one position description can cover many roles, this is known as Broad Based Role (BBR). Using BBR allows us to be responsive to our customers and to strengthen the connections across our organisation. It also gives us the flexibility to provide wider opportunities to our people, to further their careers.

If you have any questions about this role or working at Toitū Te Whenua, please email   and our People Services Team will be in touch with you.