Security Engineer: CIS Benchmarks, Puppet & IaC (Contract)

Centorrino-Technologies-1; City of Melbourne; On-site; AUD 120,000 - 160,000; Full time

Job summary

Centorrino Technologies is seeking an experienced Infrastructure Security Engineer for a 6-month contract based in Hobart or Melbourne. You will implement CIS benchmarks, automate security hardening with Puppet, and manage IaC via GitHub while collaborating with Cyber Security and IT teams.

The role requires strong Windows Server and Linux security experience, vulnerability management, and ability to work across infrastructure, security and application teams.

Qualifications

• Strong experience administering and securing Windows Server and Linux environments.
• Hands-on experience with CIS Benchmarks, security baselines or OS hardening.
• Strong understanding of vulnerability management, secure configuration and security controls.
• Enterprise experience with Puppet and Infrastructure as Code (IaC).
• Strong experience using GitHub for source control, branching, pull requests and code reviews.
• Strong troubleshooting and analytical skills, with the ability to understand the impact of security controls on applications and services.

Responsibilities

• Implement and maintain CIS Benchmark Level 1 security controls across Windows and Linux environments.
• Assess server configurations, identify security gaps and support remediation activities.
• Develop and maintain Puppet code to automate security hardening and configuration.
• Manage infrastructure-as-code through GitHub, including pull requests, peer reviews and releases.
• Test and validate security configurations before production deployment.
• Troubleshoot issues resulting from security hardening and perform root cause analysis.
• Develop remediation, rollback and recovery procedures where required.
• Work closely with Cyber Security, Cloud Infrastructure, Application and Technical Support teams.
• Maintain documentation covering security controls, configurations and deployment processes.
• Support initiatives to reduce vulnerabilities and improve the overall security posture of the server environment.

Skills

Windows Server

Linux

CIS Benchmarks

Vulnerability mgmt

Security controls

IaC

Troubleshooting

Tools

Puppet

GitHub

Job description

Centorrino Technologies is seeking an experienced Infrastructure Security Engineer for a 6-month contract based in Hobart or Melbourne. You will implement CIS benchmarks, automate security hardening with Puppet, and manage IaC via GitHub while collaborating with Cyber Security and IT teams.

The role requires strong Windows Server and Linux security experience, vulnerability management, and ability to work across infrastructure, security and application teams.