Cyber Security Engineer

Exclaim IT; City of Brisbane; On-site; AUD 150,000 - 190,000; Full time

Job summary

Exclaim IT seeks an experienced Cyber Security Engineer to lead uplift initiatives across PKI, certificate lifecycle management, encryption, IAM, PAM and infrastructure security. The initial focus is a PKI and Certificate Lifecycle Program, spanning discovery, PKI design, governance, automation, monitoring and integration with non-domain joined devices and cryptographic standards uplift.

Following delivery, the role expands to broader IAM and Infrastructure Security initiatives, offering

Qualifications

• Experience designing, implementing and supporting enterprise PKI solutions.
• Strong ability to manage certificate lifecycle (discovery, issuance, renewal, revocation, monitoring and reporting).
• Experience with Microsoft AD CS or equivalent PKI platforms.
• Experience implementing certificate-based authentication and deployment solutions.
• Experience integrating certificates with AD/Entra ID/Intune and cloud apps.
• Knowledge of PKI governance, templates, CRL, OCSP, trust chains and cryptographic standards.

Responsibilities

• Design, implement and support enterprise PKI solutions.
• Conduct certificate discovery and establish an enterprise certificate inventory.
• Implement certificate governance, lifecycle management and automation.
• Design and implement encryption controls for data at rest and in transit.
• Implement RBAC and least-privilege security controls.
• Support IAM, IGA, PAM and PIM capabilities.
• Design and implement PAW and Jump Host solutions.
• Integrate certificates across Active Directory, Entra ID, Intune and cloud apps.
• Develop monitoring, alerting, standards and technical documentation.
• Contribute to broader cyber security and infrastructure security uplift initiatives.

Skills

Enterprise PKI

Certificate lifecycle

RBAC & least-privilege

IAM concepts

PAM & PIM

Encryption

AD/Entra ID integration

Certificate deployment

Security governance

Zero Trust

Tools

Venafi

Keyfactor

AppViewX

DigiCert Trust Lifecycle Manager

SCEP

NDES

Intune Certificate Connector

Microsoft Cloud PKI

CyberArk

Delinea

Saviynt

Okta

Job description

We are seeking an experienced Cyber Security Engineer to support and lead cyber security uplift initiatives across PKI, certificate lifecycle management, encryption, identity and access management, privileged access security and infrastructure security.

The initial focus of the role will be on the delivery of a PKI and Certificate Lifecycle Program, with responsibilities spanning certificate discovery, PKI solution design, certificate governance, lifecycle automation, monitoring, integration with non-domain joined devices and cryptographic standards uplift.

Following completion of the PKI program, the role will transition into broader IAM and Infrastructure Security initiatives, providing the opportunity to work across a diverse range of enterprise security capabilities.

Key responsibilities

• Design, implement and support enterprise PKI solutions.
• Conduct certificate discovery and establish an enterprise certificate inventory.
• Implement certificate governance, lifecycle management and automation.
• Design and implement encryption controls supporting data at rest and data in transit.
• Implement RBAC and least-privilege security controls.
• Support IAM, IGA, PAM and PIM capabilities.
• Design and implement PAW and Jump Host solutions.
• Support certificate integration across Active Directory, Entra ID, Intune, enterprise applications and non-domain joined devices.
• Develop monitoring, alerting, standards, procedures and technical documentation.
• Contribute to broader cyber security and infrastructure security uplift initiatives.

Highly desirable criteria

• Experience with Venafi, Keyfactor, AppViewX or DigiCert Trust Lifecycle Manager.
• Experience with SCEP, NDES, Intune Certificate Connector or Microsoft Cloud PKI.
• Experience with CyberArk, Delinea, Saviynt or Okta.
• Knowledge of ISO 27001 and NIST Cyber Security Framework.
• Experience working within large and complex enterprise environments.
• Experience across Microsoft security technologies and enterprise infrastructure platforms.
• Experience developing security standards, procedures and technical documentation.
• Experience supporting security uplift and transformation programs.

Skills and experience

• Demonstrated experience designing, implementing and supporting enterprise PKI solutions.
• Strong experience managing certificate lifecycle activities, including discovery, issuance, renewal, revocation, monitoring and reporting.
• Experience with Microsoft AD CS or equivalent PKI platforms.
• Experience implementing certificate-based authentication and certificate deployment solutions.
• Experience integrating certificates with Active Directory, Entra ID, Intune, enterprise applications, cloud services and non-domain joined devices.
• Experience implementing certificate lifecycle automation and governance processes.Strong understanding of Certificate Authorities, certificate templates, CRL, OCSP, trust chains, key management and cryptographic standards.
• Experience implementing encryption controls for data at rest and data in transit.
• Experience implementing RBAC and least-privilege security models.
• Experience with IGA, access certification and access review processes.
• Experience with PAM, PIM and privileged access security controls.
• Experience implementing PAW and Jump Host solutions.
• Strong experience working across Entra ID, Active Directory, Windows Server and enterprise infrastructure platforms.
• Experience with security hardening and infrastructure security practices.
• Knowledge of Entra ID, Microsoft Defender, BitLocker and related Microsoft security technologies.
• Understanding of ASD Essential Eight, IS18 and Zero Trust principles.
• Opportunity to work on a significant enterprise cyber security uplift program.
• Work across PKI, IAM, PAM, encryption and infrastructure security.
• Exposure to a broad range of enterprise security technologies and platforms.
• Opportunity to contribute to both technical delivery and security governance.
• Progression into broader IAM and Infrastructure Security initiatives following completion of the initial PKI program.