Security Engineer

Cloud Delivered PTY LTD.; City of Hobart; Hybrid; AUD 110,000 - 140,000; Full time

Job summary

Cloud Delivered PTY LTD. in Hobart seeks a hands-on security engineer to harden Windows and Linux fleets to CIS Benchmark Level 1, translate controls into Puppet configurations, and manage changes through GitHub PRs.

You will work with Cloud Infrastructure, Cyber Security, and application owners to test, validate, and safely deploy baseline settings, and troubleshoot when hardening impacts operations.

Qualifications

• Experience implementing CIS Benchmark Level 1 across Windows and Linux.
• Translate hardening controls into Puppet configuration.
• Manage changes through GitHub pull requests.

Responsibilities

• Harden Windows and Linux server fleets in a real infrastructure.
• Develop and maintain Puppet modules for baseline settings.
• Collaborate with Cloud Infrastructure, Cyber Security and app owners to test and deploy baselines.

Skills

CIS Benchmark Level 1 experience

Puppet configuration writing

GitHub workflow / PRs

Impact assessment & troubleshooting

Tools

Puppet

GitHub

Job description

Senior roles in cloud, delivery, engineering, and change. Placed properly.

Key requirements

• Hands-on experience implementing CIS Benchmark Level 1 hardening across Windows and Linux server fleets — you know the controls, not just the theory.
• Proven ability to translate security baselines into maintainable Puppet configuration and manage changes via GitHub pull requests.
• Demonstrated ability to assess operational and application impact of hardening controls, and troubleshoot issues when things break.

The gig

G'day, security trailblazers!

Picture this: you're embedded in a critical infrastructure environment, rolling up your sleeves to harden a real-world Windows and Linux server fleet against CIS Benchmark Level 1 controls. This isn't a 'set and forget' gig — it's hands-on, high-impact work where your decisions directly protect essential energy infrastructure.

You'll be translating approved hardening controls into clean, maintainable Puppet configuration, shepherding changes through GitHub pull requests, and collaborating with Cloud Infrastructure, Cyber Security, application owners and project stakeholders to test, validate and safely deploy baseline settings. When hardening breaks something (and it will), you'll be the one who knows exactly why — and how to fix it.

We know because we do. Our crew has lived this work — we understand the difference between someone who can recite a CIS benchmark and someone who's actually wrestled a production Linux fleet into compliance without taking down a critical service. We're looking for the latter.

If you tick the essentials below, we'll help you nail this one.

• Experience implementing CIS Benchmark Level 1 server hardening across Windows and Linux server fleets.
• Ability to translate approved hardening controls into maintainable Puppet configuration.
• Experience managing changes through GitHub pull requests.
• Ability to work with Cloud Infrastructure, Cyber Security, application owners and project stakeholders to test, validate and safely deploy baseline settings.
• Understanding of the purpose of each control, the operational and application impact of applying it, and the troubleshooting steps required when hardening introduces system, service or application issues.

Screening Questions YOU WILL BE ASKED:

Seriously, don't bother if you don't think you'll pass these questions.

Can you attend onsite at Hobart location?

• Can you attend onsite at Hobart location?

  Expected answer: yes / no

Do you live in NSW, TAS, VIC?

• Do you live in NSW, TAS, VIC?

  Expected answer: yes / no

Are you an Australian Permanent Resident or Citizen with full work rights?

• Are you an Australian Permanent Resident or Citizen with full work rights?

  Expected answer: yes / no

How many years of total experience do you have working in regulated enterprise environments?

• How many years of total experience do you have working in regulated enterprise environments?

  Expected answer: a number

How many years of experience do you have implementing CIS Benchmark Level 1 server hardening?

• How many years of experience do you have implementing CIS Benchmark Level 1 server hardening?

  Expected answer: a number

How many years of experience do you have hardening Windows server environments?

• How many years of experience do you have hardening Windows server environments?

  Expected answer: a number

How many years of experience do you have hardening Linux server environments?

• How many years of experience do you have hardening Linux server environments?

  Expected answer: a number

How many years of experience do you have writing and maintaining Puppet configuration for server hardening or compliance?

• How many years of experience do you have writing and maintaining Puppet configuration for server hardening or compliance?

  Expected answer: a number

How many years of experience do you have managing infrastructure changes via GitHub pull requests?

• How many years of experience do you have managing infrastructure changes via GitHub pull requests?

  Expected answer: a number

On a scale of 1 to 10, how would you rate your ability to assess and communicate the operational and application impact of applying hardening controls to production systems?