Principal Consultant, ARMIS - 12 month Fixed Term Contract

Nexon Asia Pacific; Sydney; On-site; AUD 140,000 - 190,000; Full time

Job summary

Nexon Asia Pacific is seeking a Senior Security Engineer to manage and deploy Armis end-to-end, leveraging vendor learning resources during onboarding. You will review architectures, provision appliances, ensure telemetry capacity, and coordinate with IT, network, cloud, and security teams to maintain robust security posture across on-prem and cloud environments.

Responsibilities include RBAC, MFA, identity integrations, SIEM and EDR/XDR integrations, disaster recovery planning, and documenting

Qualifications

• Experience designing and validating enterprise security architectures.
• Proven ability to deploy and manage Armis-based solutions.
• Knowledge of network, server, cloud, and security operations.
• Familiarity with compliance standards like NIST, ISO 27001, CIS.

Responsibilities

• Review and validate Armis architecture against security requirements.
• Provision Armis appliances and ensure capacity for telemetry.
• Coordinate infrastructure dependencies across IT and security teams.
• Integrate with SIEM, vulnerability, and ITSM platforms.
• Develop runbooks, monitoring, and disaster recovery procedures.
• Deliver knowledge transfer to operations teams.

Skills

Armis expertise

Security engineering

RBAC & least-privilege

Identity providers integration

MFA & privileged access

Disaster recovery planning

Tools

Armis

SIEM (Splunk/QRadar/Microsoft Sentinel)

Vulnerability platforms (Tenable/Qaulys/Rapid7)

ITSM tools (ServiceNow/Jira)

EDR/XDR integrations

Cloud platforms (Azure/AWS/GCP)

Job description

Infrastructure & Platform Requirements

This is aimed for a senior security engineer manage and deploy Armis end-end. Assumption is that they can gain Armis specific knowledge once onboarded to the vendor learning platform (eg. integrations section below).

Feel free to alter and trim as required.

• Review and validate Armis architecture against enterprise security and operational requirements.
• Provision and configure Armis appliances (cloud, virtual, or physical) according to vendor best practices.
• Ensure adequate compute, storage, and network capacity for device discovery and telemetry processing.
• Validate high availability, redundancy, and disaster recovery requirements.
• Facilitate recovery procedures for Armis platform components (collectors and brokers).
• Coordinate infrastructure dependencies across server, network, cloud, and security teams.

Network Requirements

• Configure SPAN, TAP, or packet mirror sessions for required network visibility.
• Ensure routing, firewall, and load-balancing requirements are documented and implemented.
• Validate network segmentation and connectivity between Armis collectors and management components.
• Configure required DNS, NTP, and certificate services.
• Assess bandwidth consumption and telemetry flow impacts.
• Verify access to all required device management and monitoring networks.

Security Requirements

• Implement RBAC and least-privilege access controls.
• Integrate with enterprise identity providers (Azure AD, Entra ID, Okta, Active Directory, etc.).
• Configure MFA and privileged access management for administrative accounts.
• Validate data encryption in transit and at rest.
• Review compliance requirements (ISO 27001, Essential Eight, NIST, SOC, CIS benchmarks).
• Establish audit logging and log retention policies.

System Integrations

• Integrate with SIEM platforms (Microsoft Sentinel, Splunk, QRadar, etc.).
• Integrate with vulnerability management platforms (Tenable, Qualys, Rapid7).
• Configure ITSM integration (ServiceNow, Jira, etc.) for incident and asset workflows.
• Integrate with NAC platforms (Cisco ISE, Aruba ClearPass, FortiNAC).
• Configure EDR/XDR integrations where required (Defender for Endpoint, CrowdStrike, SentinelOne).
• Validate API connectivity and authentication methods.

Asset Discovery & Visibility

• Define device discovery scope across IT, OT, IoT, medical, and cloud environments.
• Validate coverage of all network segments and critical assets.
• Establish asset classification and ownership models.
• Configure device tagging, grouping, and business context mapping.
• Validate unmanaged and unknown device identification capabilities.

Cloud & Hybrid Requirements

• Configure cloud connectors (Azure, AWS, GCP) as required.
• Validate permissions and service accounts for cloud inventory collection.
• Ensure secure communication between cloud workloads and Armis.
• Implement governance for multi-cloud environments.

Operational Readiness

• Develop deployment runbooks and standard operating procedures.
• Define monitoring, alerting, and escalation processes with Armis.
• Establish platform health monitoring and capacity management.
• Conduct user acceptance testing and operational validation.
• Deliver knowledge transfer to security operations and infrastructure teams.
• Create support and maintenance procedures.

Project & Governance Requirements

• Perform technical design review and architecture approval.
• Complete security risk assessment and change management requirements.
• Define success criteria and measurable deployment outcomes.
• Produce as-built documentation and configuration baselines.
• Establish ongoing ownership and support model.
• Plan phased rollout and rollback procedures.

Senior Engineer Deliverables

• Presales consulting with clients.
• Solution architecture and deployment design documentation.
• Network and integration design diagrams.
• Security configuration standards.
• Translate overall risk assessment to key stakeholders.
• Conduct and review gap assessments with key stakeholders.
• Operational runbooks and support procedures.
• Test plans and validation results.
• Handover documentation and knowledge transfer sessions.
• Production readiness sign-off.