SECURITY PLATFORM ENGINEER

About CITY PEOPLE SOLUTIONS (CPS):

City People Solutions is a leading IT Consulting, multi-specialist and managed recruitment and talent hire services provider. We are recognized for our expertise and success in providing businesses with flexible, Motivated and performance-based workforce within the Australian marketplace.

Since our beginnings in 2016, the Australian Staffing Agency has grown in the spirit of providing professional services with a personal touch and exceeding the expectations of our customers. CPS provides quality labor solutions across a number of industry sectors including Industrial and commercial recruitment and focuses on helping our customers meet their staffing needs.

City People Solutions has built a strong company with a solid reputation based upon the company values of professionalism with a personal touch, respect for our customers and community, efficiency and responsiveness.

CPS provides training and on-the-job mentoring for all our staff to instill our values and help exceed our customers’ expectations in the work that they do.

We help businesses build what is genuinely meaningful to their customers. We find the best way to enable change from the inside and ensure that the positive changes we make are sustained long after we leave.

Find us at – cpsanz.com

Job description: Security Platform Engineer with runZero / Armis

We are looking for a hands on Cyber Security Platform Engineer to help deliver a new security product across the Client environment.

Working closely with the architect and product/Vendor SME, the successful candidate will drive the technical implementation, coordinate agent deployments, and manage firewall requirements, and work with various technology and cyber teams to implement controls such as SSO, MFA etc. This role requires someone who can work effectively with stakeholders across Client, taking the product to BAU.

Platform engineering and configuration

• Design and implement the runZero platform operating model, including environments, access, roles, boundaries, sites, asset groups, tags and naming standards.

• Configure discovery coverage for corporate, data centre, cloud, remote access, network, IoT and relevant OT environments.

• Design appropriate active scanning, passive discovery and integration patterns for different network zones and operational risk profiles.

• Establish safe scanning standards, approval gates, maintenance windows and exception processes for sensitive or fragile environments.

• Configure asset classification, ownership, business context, criticality and lifecycle attributes.

• Define standards for handling transient, ephemeral, duplicate, decommissioned and unmanaged assets.

• Develop reusable configuration patterns and templates that can be applied consistently across sites and environments.

• Maintain a clear separation between production configuration, testing and experimental changes.

Integrations and data engineering

• Integrate runZero with CMDB, ServiceNow, Tenable, EDR, NAC, DNS/DHCP, cloud platforms, identity systems, SIEM, SOAR and relevant infrastructure tools.

• Implement API-based ingestion and egress patterns using secure service identities and least-privilege access.

• Automate asset reconciliation, deduplication, enrichment, ownership mapping and data-quality checks.

• Ensure downstream systems receive consistent, useful and appropriately scoped data rather than uncontrolled asset or alert noise.

• Define integration contracts, schemas, field mappings, ownership, error handling, retry behaviour and support expectations.

• Build mechanisms to detect integration drift, stale credentials, failed synchronisation and unexpected data-volume changes.

Automation and workflow engineering

• Automate platform onboarding, configuration validation, scan scheduling, asset tagging, reporting and operational housekeeping.

• Automate the routing of actionable exposures to the correct security, infrastructure, network, cloud or application owners.

• Implement event-driven workflows for newly discovered assets, exposed services, control gaps, unauthorised devices and material changes.

• Design idempotent automation that can be safely re-run without creating duplicate records, tickets or configuration drift.

• Use APIs, webhooks, scripts and workflow platforms to reduce manual administration and improve response times.

• Introduce approval controls for high-impact or potentially disruptive actions.

• Create automated lifecycle handling for assets that are retired, renamed, moved, rebuilt or short-lived.

SRE and operations

• Treat runZero configuration and operational processes as code wherever possible.

• Establish version control, peer review, automated testing, release controls and rollback procedures for platform changes.

• Define service-level indicators and objectives for discovery coverage, data freshness, integration health, scan success, alert delivery and remediation workflow reliability.

• Implement dashboards and alerts that detect platform degradation before it affects consumers.

• Create operational runbooks for common failures, including collector or explorer issues, scan failures, integration errors, data-quality problems and access failures.

• Design backup, recovery, disaster-recovery and business-continuity procedures appropriate to the service.

• Conduct capacity, performance and scale assessments as coverage expands across Client environments.

• Manage credentials through approved enterprise secrets-management capabilities; do not embed secrets in scripts, repositories or configuration files.

• Implement role-based access control, privileged-access controls, administrative separation and auditable change history.

• Support security reviews, architecture reviews, privacy assessments, risk assessments and control assurance activities.

• Ensure platform data handling, logging, retention, residency and third-party access align with Optus security and regulatory requirements.

How to Apply:

Please apply using the link below or mail mirzana.t@citypeoplesolutions.com.au, further details.

Applications close based on the volume of applications received.

This is an opportunity to work somewhere you can truly be proud of your contribution. If this sounds like a role for you, let us know how you best fit the specific skills, and apply today with your cover letter and CV.

CPS is an equal opportunity employer that actively embraces diversity in its workforce through accurate community representation of gender, culture; thought and work arrangements