Senior Cloud & Security Engineer (Azure/Hybrid Infrastructure)

• Sydney CBD location

• Hybrid (3 days office)

• Permanent role

If you're looking for another Azure Engineer role, this probably isn't it. If you're the person your team turns to when they're debating Azure architecture, enterprise networking, security controls or cloud governance...keep reading.

We're partnering with a well-known Australian organisation that is investing heavily in the maturity of its Azure and cloud security capability. This isn't a project role where you'll build something and walk away. You'll become one of the technical leaders responsible for securing, evolving and continuously improving a complex enterprise environment that spans both on-premises infrastructure and Azure cloud.

You'll work across cloud engineering, infrastructure, cyber security and architecture, solving real technical challenges while influencing the future direction of the platform.

What you'll be doing

You'll operate across both engineering and security, including:

• Designing, building and supporting enterprise Azure infrastructure, alongside the on-premises environment it connects to.

• Owning networking and connectivity between on-prem and Azure, including DNS routing and security across that boundary.

• Improving vulnerability management, patching and cloud security posture.

• Driving automation using Infrastructure as Code and modern engineering practices.

• Securing Microsoft cloud technologies including Azure, Entra ID and Microsoft 365.

• Implementing and improving Azure governance, policy and security controls.

• Working across networking, identity, observability and cloud security platforms in a genuinely hybrid environment.

• Partnering with technical and business stakeholders to recommend practical solutions and uplift platform maturity.

• Playing a key role in the organisation's adoption of AI technologies, ensuring they are deployed securely and responsibly.

What we're looking for

This role isn't about certifications or ticking boxes.

We're looking for someone who has genuinely built and operated enterprise Azure environments and can comfortably explain the decisions they've made.

Ideally you'll bring experience with

• Enterprise Azure architecture

• Azure Landing Zones, Management Groups and Azure Policy

• Hub-and-spoke networking, Private Endpoints, Private DNS and Azure Firewall

• Hybrid connectivity between on-premises infrastructure and Azure cloud

• Microsoft Defender, Microsoft Sentinel and cloud security tooling

• Entra ID, Conditional Access, RBAC and Privileged Identity Management (PIM)

• Terraform, Bicep or Infrastructure as Code

• Azure DevOps and automation

• Vulnerability management and security operations

• Microsoft 365 security and governance

Most importantly, you'll enjoy solving complex technical problems, taking ownership and working independently. This is a role for someone who doesn't wait for the answer-they work it out.

About you

You'll likely come from a senior Azure engineering, cloud platform or cloud security background within a large enterprise environment, ideally with exposure to hybrid infrastructure rather than a purely cloud-native setup. You're technically credible, naturally curious and equally comfortable discussing on-prem and Azure networking with engineers or explaining security recommendations to senior stakeholders.