EL1 Senior Endpoint Security Infrastructure Engineer

Australian Citizens residing in Australia only respond.

Job details

We are seeking a technically skilled and security-conscious Platform Engineer to join our Platform Services team. The role contributes to the operation, maintenance and continual improvement of the Department's ICT infrastructure and endpoint security platforms, with a strong focus on secure, reliable and supportable services.

The position supports Windows Server environments, endpoint protection and application control technologies, identity and privileged access management platforms, and related infrastructure services. The successful candidate will work collaboratively with Platform Services colleagues, Cyber Security, infrastructure and application teams, project delivery areas, vendors and business stakeholders.

The role will balance business-as-usual support with project delivery, security uplift, vulnerability remediation, platform lifecycle management, documentation and knowledge transfer

Key duties and responsibilities

• Support and maintain enterprise endpoint security platforms, including application control, endpoint protection, endpoint detection and response (EDR), host-based firewalls, vulnerability management and device control technologies.
• Administer and support technologies such as Airlock Digital, Symantec Endpoint Protection and Microsoft Defender, including platform configuration, policy maintenance, agent health and lifecycle management.
• Plan and deliver security platform patching, upgrades, policy changes and agent deployments through established change management processes.
• Assess and implement application whitelisting, application unblocking, antivirus exclusion and security policy requests in consultation with system owners and Cyber Security.
• Monitor and respond to CVEs, vendor advisories, security findings and vulnerabilities, including impact assessment, remediation planning, testing and implementation.
• Provide operational and project support across enterprise Windows Server environments and related infrastructure services including windows servers without a GUI (Server core).
• Support Windows Server lifecycle and modernisation activities, including upgrades, migrations, patching, hardening, compatibility assessment and transition to supported operating system versions.
• Administer and troubleshoot technologies including Active Directory, Entra ID, DNS, PKI, Group Policy, DFS, SCOM, SCCM/MECM and Intune.
• Support and maintain enterprise identity management platforms, including Microsoft Identity Manager and Unify Broker.
• Contribute to the support and maintenance of privileged access management solutions such as CyberArk and Secret Server.
• Undertake troubleshooting and provide technical advice on identity, authentication, access and privileged access issues and workflows.

Infrastructure Security