Infrastructure Engineer

Allura Partners; Sydney; Hybrid; AUD 166,000 - 221,000; Part time

Job summary

Allura Partners in Sydney is seeking an experienced Infrastructure Engineer (Security) for a day-rate contract to lead remediation after a penetration test.

You will harden a hybrid Windows and Azure environment, close pen test findings, and ensure compliance uplift on a live project. Strong Microsoft stack skills and security tooling experience are required.

Qualifications

• Hands-on experience with Windows Server, Active Directory, DNS/DHCP, and GPO.
• Experience with Azure, Entra ID, Intune, Defender, and SCCM.
• Practical security tooling exposure: SIEM (Sentinel), EDR, Qualys/VMDR.
• Familiarity with Essential Eight and ISO 27001 frameworks.
• PowerShell scripting for automation and reporting.

Responsibilities

• Remediate pen test findings across endpoints, on-prem servers, and Azure.
• Manage patch and update compliance using Intune, SCCM, Azure Update Manager, WSUS/GPO.
• Tune Azure WAF and Application Gateway against OWASP Top 10.
• Administer hardening of on-prem Windows Server, AD/DNS/DHCP, Hyper-V/VMware with Azure workloads.
• Hardening Entra ID and reducing privileged access exposure.
• Run vulnerability scanning and EDR triage (Qualys, Defender, Sentinel).
• Align remediation work to Essential Eight and ISO 27001 controls.

Skills

Hybrid work experience

Security remediation

Automation scripting

Tools

Windows Server

Active Directory

Azure

Entra ID

Intune

Defender

SCCM

Qualys/VMDR

Sentinel

PowerShell

Azure WAF

Application Gateway

Hyper-V

VMware

Job description

Day Rate Contract - Infrastructure Engineer (Security) - Pen Test remediation - Sydney/Hybrid

Our client is running a security remediation program off the back of a recent penetration test and needs an experienced Infrastructure Engineer to lead the technical fix-up. This isn't BAU support, you'll be closing pen test findings, hardening a hybrid Windows and Azure environment, and proving compliance uplift on a live project.

What you'll be doing:

• Remediating critical and high vulnerabilities from pen test findings across endpoints, on-prem servers, and Azure
• Managing patch and update compliance (Intune, SCCM, Azure Update Manager, WSUS/GPO)
• Implementing and tuning Azure WAF and Application Gateway against OWASP Top 10 threats
• Administering and hardening on-prem Windows Server, Active Directory, DNS/DHCP, and Hyper-V/VMware alongside Azure workloads
• Hardening Entra ID (Conditional Access, MFA, PIM) and reducing privileged access exposure across hybrid identity
• Running vulnerability scanning and EDR triage (Qualys, Defender, Sentinel)
• Aligning remediation work to Essential Eight and ISO 27001 controls
• Managing change through CAB/TAB processes with proper rollback planning

What you'll bring:

• Strong Microsoft stack experience across on-prem Windows Server, AD/GPO, Azure, Entra ID, Intune, Defender, and SCCM
• Confidence working hybrid, not just a pure cloud background
• Practical security tooling exposure: SIEM (Sentinel), EDR, Qualys or equivalent VMDR
• Working knowledge of Essential Eight and ISO 27001 frameworks
• PowerShell scripting for automation and compliance reporting
• Comfortable in a live remediation environment with tight timeline