Infrastructure Security Engineer

Centorrino-Technologies-1; City of Melbourne; On-site; AUD 120,000 - 160,000; Full time

Job summary

Centorrino Technologies is seeking an experienced Infrastructure Security Engineer for a 6-month contract based in Hobart or Melbourne. You will implement CIS benchmarks, automate security hardening with Puppet, and manage IaC via GitHub while collaborating with Cyber Security and IT teams.

The role requires strong Windows Server and Linux security experience, vulnerability management, and ability to work across infrastructure, security and application teams.

Qualifications

• Strong experience administering and securing Windows Server and Linux environments.
• Hands-on experience with CIS Benchmarks, security baselines or OS hardening.
• Strong understanding of vulnerability management, secure configuration and security controls.
• Enterprise experience with Puppet and Infrastructure as Code (IaC).
• Strong experience using GitHub for source control, branching, pull requests and code reviews.
• Strong troubleshooting and analytical skills, with the ability to understand the impact of security controls on applications and services.

Responsibilities

• Implement and maintain CIS Benchmark Level 1 security controls across Windows and Linux environments.
• Assess server configurations, identify security gaps and support remediation activities.
• Develop and maintain Puppet code to automate security hardening and configuration.
• Manage infrastructure-as-code through GitHub, including pull requests, peer reviews and releases.
• Test and validate security configurations before production deployment.
• Troubleshoot issues resulting from security hardening and perform root cause analysis.
• Develop remediation, rollback and recovery procedures where required.
• Work closely with Cyber Security, Cloud Infrastructure, Application and Technical Support teams.
• Maintain documentation covering security controls, configurations and deployment processes.
• Support initiatives to reduce vulnerabilities and improve the overall security posture of the server environment.

Skills

Windows Server

Linux

CIS Benchmarks

Vulnerability mgmt

Security controls

IaC

Troubleshooting

Tools

Puppet

GitHub

Job description

At Centorrino Technologies (CT), we’re more than just tech—we’re a community that goes beyond expectations. We’ve been recognised as a Great Place to Work in2024-2025 and one of the Best Places to Work Medium & Large Size in Australia for 2025, with an outstanding eNPS score of 68. And we’re not stopping there.

We’re looking for an experiencedInfrastructure Security Engineerto support the hardening and security of Windows and Linux server environments. You’ll play a key role in implementing CIS security controls, improving infrastructure security, and automating secure configurations using Puppet and GitHub.

This role will be a 6-month contract based in Hobart or Melbourne.

What You’ll Do

• Implement and maintainCIS Benchmark Level 1security controls across Windows and Linux environments.
• Assess server configurations, identify security gaps and support remediation activities.
• Develop and maintainPuppet codeto automate security hardening and configuration.
• Manage infrastructure-as-code throughGitHub, including pull requests, peer reviews and releases.
• Test and validate security configurations before production deployment.
• Troubleshoot issues resulting from security hardening and perform root cause analysis.
• Develop remediation, rollback and recovery procedures where required.
• Work closely with Cyber Security, Cloud Infrastructure, Application and Technical Support teams.
• Maintain documentation covering security controls, configurations and deployment processes.
• Support initiatives to reduce vulnerabilities and improve the overall security posture of the server environment.

What You’ll Bring

• Strong experience administering and securingMicrosoft Windows Server and Linux environments.
• Hands‑on experience withCIS Benchmarks, security baselines or OS hardening.
• Strong understanding of vulnerability management, secure configuration and security controls.
• Enterprise experience withPuppetand Infrastructure as Code (IaC).
• Strong experience usingGitHubfor source control, branching, pull requests and code reviews.
• Strong troubleshooting and analytical skills, with the ability to understand the impact of security controls on applications and services.
• Experience working across infrastructure, security and application teams in a collaborative environment.

Desirable:Experience in regulated or critical infrastructure environments, cloud infrastructure, vulnerability management tools such as Tenable/Qualys/Rapid7, or relevant security certifications.

Why You'll Love Working Here:

Our company is more than just a workplace, it's a hub of inspiration and creativity where employees love to work! Here's why:

• Extensive training and development opportunities that enable continual growth as part of your career planning.
• Extensive discounts and benefits to maximise your money.
• A choice of your IT equipment to maximise your success and access to cost-price tech for your personal needs.
• Fun team events to celebrate achievements and connect with colleagues outside work as part of our engaging culture.

CT celebrates diversity and enables every voice to be heard as we drive to create the world we want.

Note: A valid Vulnerable People / Working with Children Check (WWCC) and Police Check are required.