Cloud Security Specialist

Randstad; Brisbane; Hybrid; AUD 202,000 - 226,000; Full time

Benefits offered by this job

Udemy license for ongoing learning

Exclusive discounts

Private health fund discounts

3 payruns a week

Job summary

Randstad is partnering with a Queensland Government Department to recruit a Cloud Security Specialist for a 3-month contract in Brisbane CBD with hybrid WFH flexibility. The role will design and implement cloud, data, and identity security controls across the Enterprise Data Platform, championing Zero Trust across Azure and Fabric.

Key responsibilities include defining RBAC and PIM governance, data protection controls, secure CI/CD practices, and coordinating with audit and SIEM teams to ensure

Qualifications

• Extensive cloud security experience securing Azure and Fabric environments.
• Expertise in Microsoft Entra ID, Azure RBAC, PIM, Conditional Access and identity governance.
• Proven ability to implement fine-grained data access controls (RLS, CLS) across SQL and analytics platforms.
• DevSecOps experience including securing CI/CD pipelines and IaC.

Responsibilities

• Define end-to-end cloud and data security architecture and governance across Azure, Fabric, and analytics services.
• Design, govern and mature RBAC, user access matrices, and PIM arrangements.
• Architect data protection controls including row/column-level security, masking, encryption, key management, and DLP across data warehouses and lakehouses.
• Establish secure delivery practices for CI/CD pipelines, IaC, deployment identities, and credential lifecycle management.
• Lead remediation of controls from Threat Risk Assessments, audits, and pen tests, and integrate with SIEM.

Skills

Cloud security

Data security

IAM

Security architecture

Azure

Microsoft Fabric

Entra ID

Azure RBAC

PIM

Conditional Access

DevSecOps

CI/CD security

Security governance

Education

Relevant security certifications

Job description

Randstad is currently working with a Queensland Government Department to find a Cloud Security Specialist on an initial 3 month contract with potential of extension. This role is based in Brisbane CBD with WFH flexibility. The Cloud Security Specialist will lead the design, implementation, and assurance of cloud, data, and identity security controls across an evolving Enterprise Data Platform (EDP). In this hands-on contract role, you will champion a Zero Trust approach across Microsoft Azure and Microsoft Fabric ecosystems, ensuring the platform remains secure and audit-ready as it onboards critical enterprise datasets.

Role: Cloud Security Specialist

Client: Queensland Government Department

Contract: 3 Months with potential of extension

Pay rate: $1,093.76 a day + super ($1,225.01 a day including super)

Location: Brisbane CBD with WFH flexibility

What You Will Do:

• Define, maintain, and implement the end-to-end cloud and data security architecture, target-state roadmap, reusable patterns, and guardrails across Azure, Microsoft Fabric, and analytics services.
• Design, govern, and mature the role-based access control (RBAC) model, user access matrices, and Privileged Identity Management (PIM) arrangements mapped to Microsoft Entra groups and platform workspaces.
• Architect and implement fine-grained data protection controls, including row-level and column-level security, masking, encryption, key management, and data loss prevention across data warehouses and lakehouses.
• Establish secure delivery practices for CI/CD pipelines, Infrastructure as Code (IaC), deployment identities, branch protection, and credential lifecycle management.
• Lead the implementation, validation, and remediation of controls arising from Threat Risk Assessments, audits, and penetration tests, maintaining the central Security Controls Matrix and integrating with SIEM services.

What You Need to Apply for This Role:

• Extensive experience in cloud security, data security, IAM, or security architecture, with demonstrated success securing enterprise Microsoft Azure and Microsoft Fabric environments.
• In-depth expertise in Microsoft Entra ID, Azure RBAC, Privileged Identity Management (PIM), Conditional Access, and identity lifecycle governance.
• Proven track record implementing fine-grained data access controls (RLS, CLS, masking, entitlement models) across SQL, Power BI semantic models, lakehouses, and self-service analytics platforms.
• Strong background in DevSecOps practices, including securing CI/CD pipelines, release governance, secret/key rotation, and Infrastructure as Code.
• Exceptional ability to translate security assessments, threat models, and frameworks into actionable control matrices, remediation plans, and architecture documentation (with relevant certifications such as CISSP, CCSP, or Microsoft Cybersecurity Architect highly regarded).

Randstad contractor benefits:

• Access to a Udemy license for ongoing learning and continuous professional development
• Access to exclusive discounts across various platforms
• Discounts on private health funds
• 3 payruns a week

At Randstad, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.

Qualifications

• Any relevant qualifications desired.