Cloud Infrastructure & Networking Engineer

Office-based – no WFH

About Cornerstone Health

Cornerstone Health operates 16 comprehensive medical centres, delivering services across general practice, dental, radiology and allied health. With more than 20 years’ experience in primary healthcare, we support leading clinicians in delivering quality care through modern systems, structures and culture.

About the role

You will design and own the WAN topology connecting 16 distributed sites to each other and to cloud workloads, including a hub-and-spoke architecture, SD-WAN, IPsec/BGP site-to-site connectivity, firewall zoning, and network segmentation for clinical and corporate traffic. Alongside that, you will own Azure at the platform level, support AWS workloads, and drive our AI and data cloud infrastructure platform, all hands-on work.

If you are a cloud engineer who actually knows networking, or a network engineer who has built real cloud platforms, this is the role for you.

This is a fully office-based role located in North Sydney (above the station). Candidates must be willing and able to work on-site full-time.

What you’ll do

•     Designing and owning end-to-end network architecture across 16 medical centre sites, WAN, SD-WAN or VPN, routing, segmentation, and cloud connectivity.

•     Building hub-and-spoke or Virtual WAN topology in Azure, including peering, route tables, and firewall policies.

• Designing VPC/VNet architecture in both Azure and AWS, ensuring consistent segmentation and security across both clouds.

• Configuring and managing Azure Firewall, NSGs, Private Endpoints, Private DNS, and ExpressRoute/VPN gateways.

• Managing Azure and AWS environments at the platform level: landing zones, IaC (Terraform/Bicep), cost controls, and monitoring.

• Deploying and operating Linux workloads, including containers, automation scripts, and application runtimes.

• Assist with implementing and operating Microsoft Fabric and Azure AI services within appropriate network and identity controls.

• Owning network monitoring, IPAM, DNS architecture, and connectivity incident response across the org.
  

What we’re looking for

Essential

• 5+ years of experience in cloud infrastructure or network engineering, with real, hands-on delivery across both disciplines.

• Strong TCP/IP networking fundamentals: routing (BGP, OSPF), VLANs, firewalling, VPN (IPsec/SSL), and WAN design.

• Demonstrated experience designing multi-site WAN connectivity across a distributed organisation.

• Senior Azure capability: VNet/hub-and-spoke design, Azure Firewall, Private Endpoints, landing zones, IaC, and cost management.

• Hands-on AWS experience, including VPC, Transit Gateway, Security Groups, and IAM, production-level, not just exposure.

• Strong Linux administration: Ubuntu or RHEL, shell scripting, Docker/containers, and system-level troubleshooting.

• A builder mentality: you take ownership from whiteboard to production, and documentation is non-negotiable.

Highly regarded

• Healthcare experience is highly valued and will be given significant weight in the selection process

• Hands-on experience with Microsoft Fabric, Azure OpenAI, or Azure AI Search.

• SD-WAN platform experience (Meraki, Fortinet, Viptela, or similar).

• CI/CD pipeline experience using Azure DevOps or GitHub Actions for infrastructure.

• Azure certifications: AZ-104, AZ-305, DP-600 or AWS equivalent.

Why join us

• 16 sites, real WAN complexity, and cloud-native connectivity challenges that are genuinely interesting to solve.

• Small, high-trust team.

• Permanent full-time role.

• Purpose-driven culture with a genuine focus on patient outcomes

• Conveniently located in North Sydney (above the train station)

• Work that directly contributes to improving healthcare access for all Australians