Microsoft Cyber Security Engineer

The Network has been engaged to assist a Canberra-based client with a Cyber Security Engineer to support a range of strategic digital transformation and cyber security initiatives.

This opportunity will suit a hands-on Security Engineer with strong experience across Microsoft cloud technologies, identity and access management, SharePoint Online records management, Azure DevOps security, and emerging AI technologies. The successful candidate will play a key role in designing and implementing secure technology patterns while ensuring alignment with Australian Government security frameworks and compliance requirements.

Key Responsibilities

As the Cyber Security Engineer, you will:

• Implement secure technology patterns across Digital Strategy projects, including solution configuration, security control implementation, testing, deployment support, operational readiness, and transition to support teams.
• Build, configure, validate, and maintain security controls, ensuring identified gaps are remediated and implementation artefacts are produced to support operational handover and ongoing maintenance.
• Design and implement secure SharePoint Online records management capabilities, including retention policies, information protection controls, access management, secure site architectures, and integration with records management processes.
• Configure and improve Microsoft Entra ID capabilities, including:
  • Conditional Access Policies
  • Identity Governance
  • Privileged Access Management
  • Authentication and Authorisation Controls
  • Application Access Patterns
  • Integration with cloud-based services
• Implement and enhance Azure DevOps security and code assurance capabilities, including:
  • Secure CI/CD pipelines
  • Automated security scanning
  • Security gates and controls
  • Vulnerability remediation workflows
  • Secure release management practices
• Engineer secure implementation patterns for Azure Foundry, AI accelerator platforms, and emerging technology initiatives.
• Develop security strategies supporting remote and regional operating environments, with a focus on:
  • Identity and access management
  • Data protection
  • Secure deployment considerations
  • Operational resilience
• Implement and document controls aligned with Australian Government security obligations, including:
  • Information Security Manual (ISM)
  • Protective Security Policy Framework (PSPF)
  • Essential Eight
  • Privacy and data protection requirements
  • Supply chain security obligations
• Collaborate with technical and business stakeholders to ensure security requirements are embedded throughout project delivery lifecycles.

Essential Skills & Experience

• Current Active NV1 Security Clearance.
• Demonstrated experience as a Cyber Security Engineer within Federal Government or highly regulated environments.
• Strong expertise in Microsoft Entra ID and cloud identity security.
• Experience implementing SharePoint Online records management and information protection capabilities.
• Strong knowledge of Azure DevOps, CI/CD security, and secure software delivery practices.
• Experience designing and implementing cloud security controls across Azure environments.
• Knowledge of Azure AI Foundry, AI governance, and emerging AI security principles.
• Hands-on experience implementing security controls aligned to the ISM, PSPF, and Essential Eight.
• Strong documentation, stakeholder engagement, and problem-solving skills.

Desirable Experience

• Experience supporting remote and regional technology environments.
• Knowledge of Microsoft Purview, Defender, Sentinel, or broader Microsoft Security solutions.
• Certifications such as:
  • Microsoft Certified: Cybersecurity Architect Expert
  • Microsoft Certified: Identity and Access Administrator Associate
  • Azure Security Engineer Associate
  • CISSP, CISM, or SABSA

What's on Offer?

• Initial 6-month contract with two extension options.
• Opportunity to contribute to high-profile Federal Government digital and cyber security initiatives.
• Hybrid working arrangement with 3 days per week onsite in Canberra.
• Exposure to modern cloud, DevSecOps, records management, and AI technologies.
• Competitive market rates

Desired Skills and Experience

Skills & Experience Required

- Current NV1 Security Clearance (minimum).

- Demonstrated experience as a Cyber Security Engineer within Federal Government or highly regulated environments.

- Strong experience with Microsoft Entra ID including Conditional Access, Identity Governance, MFA, RBAC and Privileged Identity Management (PIM).

- Hands-on experience implementing secure Identity and Access Management (IAM) solutions in cloud environments.

- Experience delivering SharePoint Online Records Management capabilities, including retention, information protection and secure access models.

- Strong understanding of Microsoft Purview and information governance principles.

- Experience securing Azure DevOps environments, CI/CD pipelines and DevSecOps practices.

Knowledge of automated code scanning, security gates, vulnerability management and secure release processes.

- Experience designing and implementing security controls across Microsoft Azure cloud platforms.

- Exposure to Azure AI Foundry, AI accelerator technologies and emerging technology security patterns.

- Experience supporting remote and regional operating environments, including resilience and secure access solutions.

- Strong understanding of Australian Government security frameworks,

- Information Security Manual (ISM)

- Protective Security Policy Framework (PSPF)

- Essential Eight

- Privacy and Data Protection requirements

- Supply Chain Security requirements

- Experience implementing and documenting security controls and compliance evidence.

- Ability to perform security testing, validation, remediation and operational readiness activities.

- Strong stakeholder engagement and communication skills.

- Experience producing technical documentation, implementation artefacts and operational handover materials.

Desirable Qualifications

Microsoft Certified: Cybersecurity Architect Expert

Microsoft Certified: Azure Security Engineer Associate

Microsoft Certified: Identity and Access Administrator Associate

CISSP, CISM or equivalent cyber security certifications

Experience working on large-scale Digital Transformation or Cloud Modernisation programs within Government.