El1 Senior Endpoint Security Infrastructure Engineer

Softtest Pays Pty Ltd; Canberra; On-site; AUD 120,000 - 160,000; Full time

Job summary

Softtest Pays Pty Ltd is seeking a Platform Engineer to help operate and continually improve ICT infrastructure and endpoint security platforms in Canberra. You will work with Platform Services, Cyber Security, and other teams on security uplift and lifecycle management.

The role balances business-as-usual support with project delivery, vulnerability remediation and knowledge transfer across Windows Server environments, AD/Entra ID, and PAM solutions.

Qualifications

• Experience with enterprise Windows Server environments.
• Experience with endpoint security platforms and protection technologies.
• Ability to plan, implement patching, policy changes and agent deployments.
• Ability to assess and implement security policy requests in consultation with stakeholders.
• Ability to monitor CVEs and vulnerabilities and coordinate remediation.

Responsibilities

• Support and maintain endpoint security platforms including EDR and antivirus controls.
• Administer Airlock Digital, Symantec SEP and Microsoft Defender configurations and lifecycle.
• Plan security platform patching, upgrades and policy changes through change management.
• Respond to security policy requests in consultation with system owners and Cyber Security.
• Monitor CVEs and advisories; coordinate remediation planning and testing.
• Provide operational support across Windows Server environments, including Server Core.
• Help with Windows Server lifecycle, upgrades, migrations and hardening.
• Administer Active Directory, Entra ID, DNS, PKI, Group Policy, DFS, SCOM, SCCM/MECM and Intune.
• Support identity management platforms like Microsoft Identity Manager and Unify Broker.
• Contribute to privileged access management solutions such as CyberArk and Secret Server.
• Troubleshoot identity, authentication, access and PIM workflows.

Skills

Endpoint Security

Identity & Access

Security Policy

Tools

Airlock Digital

Symantec Endpoint Protection

Microsoft Defender

Active Directory

Entra ID

DNS

PKI

Group Policy

SCOM

SCCM/MECM

Intune

CyberArk

Secret Server

Unify Broker

Job description

Australian Citizens residing in Australia only respond.

Job details

We are seeking a technically skilled and security-conscious Platform Engineer to join our Platform Services team. The role contributes to the operation, maintenance and continual improvement of the Department's ICT infrastructure and endpoint security platforms, with a strong focus on secure, reliable and supportable services.

The position supports Windows Server environments, endpoint protection and application control technologies, identity and privileged access management platforms, and related infrastructure services. The successful candidate will work collaboratively with Platform Services colleagues, Cyber Security, infrastructure and application teams, project delivery areas, vendors and business stakeholders.

The role will balance business-as-usual support with project delivery, security uplift, vulnerability remediation, platform lifecycle management, documentation and knowledge transfer

Key duties and responsibilities

• Support and maintain enterprise endpoint security platforms, including application control, endpoint protection, endpoint detection and response (EDR), host-based firewalls, vulnerability management and device control technologies.
• Administer and support technologies such as Airlock Digital, Symantec Endpoint Protection and Microsoft Defender, including platform configuration, policy maintenance, agent health and lifecycle management.
• Plan and deliver security platform patching, upgrades, policy changes and agent deployments through established change management processes.
• Assess and implement application whitelisting, application unblocking, antivirus exclusion and security policy requests in consultation with system owners and Cyber Security.
• Monitor and respond to CVEs, vendor advisories, security findings and vulnerabilities, including impact assessment, remediation planning, testing and implementation.
• Provide operational and project support across enterprise Windows Server environments and related infrastructure services including windows servers without a GUI (Server core).
• Support Windows Server lifecycle and modernisation activities, including upgrades, migrations, patching, hardening, compatibility assessment and transition to supported operating system versions.
• Administer and troubleshoot technologies including Active Directory, Entra ID, DNS, PKI, Group Policy, DFS, SCOM, SCCM/MECM and Intune.
• Support and maintain enterprise identity management platforms, including Microsoft Identity Manager and Unify Broker.
• Contribute to the support and maintenance of privileged access management solutions such as CyberArk and Secret Server.
• Undertake troubleshooting and provide technical advice on identity, authentication, access and privileged access issues and workflows.