Microsoft Cyber Security Engineer

Salary: Inc Super or + GST

The Network has been engaged to assist a Canberra-based client with a Cyber Security Engineer to support a range of strategic digital transformation and cyber security initiatives.

This opportunity will suit a hands-on Security Engineer with strong experience across Microsoft cloud technologies, identity and access management, SharePoint Online records management, Azure DevOps security, and emerging AI technologies. The successful candidate will play a key role in designing and implementing secure technology patterns while ensuring alignment with Australian Government security frameworks and compliance requirements.

Key Responsibilities

As the Cyber Security Engineer, you will:

• Implement secure technology patterns across Digital Strategy projects, including solution configuration, security control implementation, testing, deployment support, operational readiness, and transition to support teams.
• Build, configure, validate, and maintain security controls, ensuring identified gaps are remediated and implementation artefacts are produced to support operational handover and ongoing maintenance.
• Design and implement secure SharePoint Online records management capabilities, including retention policies, information protection controls, access management, secure site architectures, and integration with records management processes.
• Configure and improve Microsoft Entra ID capabilities, including:
  • Conditional Access Policies
  • Identity Governance
  • Privileged Access Management
  • Authentication and Authorisation Controls
  • Application Access Patterns
  • Integration with cloud-based services
• Implement and enhance Azure DevOps security and code assurance capabilities, including:
  • Secure CI/CD pipelines
  • Automated security scanning
  • Security gates and controls
  • Vulnerability remediation workflows
  • Secure release management practices
• Engineer secure implementation patterns for Azure Foundry, AI accelerator platforms, and emerging technology initiatives.
• Develop security strategies supporting remote and regional operating environments, with a focus on:
  • Identity and access management
  • Data protection
  • Secure deployment considerations
  • Operational resilience
• Implement and document controls aligned with Australian Government security obligations, including:
  • Information Security Manual (ISM)
  • Protective Security Policy Framework (PSPF)
  • Essential Eight
  • Privacy and data protection requirements
  • Supply chain security obligations
• Collaborate with technical and business stakeholders to ensure security requirements are embedded throughout project delivery lifecycles.

Essential Skills & Experience

• Current Active NV1 Security Clearance.
• Demonstrated experience as a Cyber Security Engineer within Federal Government or highly regulated environments.
• Strong expertise in Microsoft Entra ID and cloud identity security.
• Experience implementing SharePoint Online records management and information protection capabilities.
• Strong knowledge of Azure DevOps, CI/CD security, and secure software delivery practices.
• Experience designing and implementing cloud security controls across Azure environments.
• Knowledge of Azure AI Foundry, AI governance, and emerging AI security principles.
• Hands-on experience implementing security controls aligned to the ISM, PSPF, and Essential Eight.
• Strong documentation, stakeholder engagement, and problem-solving skills.

Desirable Experience

• Experience supporting remote and regional technology environments.
• Knowledge of Microsoft Purview, Defender, Sentinel, or broader Microsoft Security solutions.
• Certifications such as:
  • Microsoft Certified: Cybersecurity Architect Expert
  • Microsoft Certified: Identity and Access Administrator Associate
  • Azure Security Engineer Associate
  • CISSP, CISM, or SABSA

What's on Offer?

• Initial 6-month contract with two extension options.
• Opportunity to contribute to high-profile Federal Government digital and cyber security initiatives.
• Hybrid working arrangement with 3 days per week onsite in Canberra.
• Exposure to modern cloud, DevSecOps, records management, and AI technologies.
• Competitive market rates