Security & Internal Infrastructure Engineer

Epic IT; Brisbane; Hybrid; AUD 90,000 - 130,000; Full time

Benefits offered by this job

Competitive salary

Certification funding

Mentoring from Solutions Architects

Hybrid work arrangement

Labs and tooling access

Knowledge-sharing sessions

Job summary

Epic IT, a Perth-based MSP, manages production infrastructure for 72 clients across cloud, networking, telephony and security. The Security & Internal Infrastructure Engineer will own the internal Microsoft 365 suite, Entra ID and security uplift across clients, with a mix of internal and client-facing work.

Role requires strong MSP/IT operations experience, ISO 27001 controls, incident response, and ongoing professional certification.

Qualifications

• 2–4 years hands-on in an MSP or internal IT role.
• Experience administering Microsoft 365 and Entra ID including CA, Intune and Exchange Online.
• Networking fundamentals: TCP/IP, DNS, DHCP, VLANs, routing, VPNs, firewall rules.
• Working knowledge of security tooling such as EDR, MDR or SIEM alerting, and email security.
• Windows Server and Active Directory, including hybrid identity.
• PowerShell you write yourself, not just scripts you’ve run.
• Clear written notes. If you can’t explain what you changed, we can’t audit it.

Responsibilities

• Run Epic IT’s own Microsoft 365 and Entra ID tenant; manage CA, Intune, Exchange Online, SharePoint and Teams.
• Set up accounts and devices for new starters and support staff.
• Write PowerShell for provisioning, reporting and maintenance jobs.
• Manage ISO 27001 controls, evidence, policies and audits; incident response and threat detection.
• Deliver client security uplifts: MFA, CA, Defender, and security awareness training.
• Keep runbooks, baselines, change records and diagrams current; train service team.

Skills

MS365 administration

Entra ID administration

Networking fundamentals

Security tooling (EDR/MDR/SIEM)

Windows Server & Active Directory

PowerShell scripting

Documentation & audit readiness

Tools

Microsoft 365 suite

Entra ID

Job description

Security & Internal Infrastructure Engineer

At Epic IT, we're more than just an Managed Service Provider – we're a dynamic team of IT professionals committed to driving technological excellence. Since 2006, we've been transforming Perth's IT landscape by putting our core values of enablement, leadership, and success at the heart of everything we do. Recognized as a CRN FAST 50 finalist in 2018, 2024, 2025 & 2026; we've consistently proven our ability to grow, innovate, and deliver exceptional IT solutions.

We believe in empowering our team to reach new heights. Our unique internal culture cultivates talent, encourages leadership, and celebrates success. When you join Epic IT, you're not just taking a job – you're embarking on a career journey with a company that's passionate about technology, committed to our people, and dedicated to making a real impact in the IT industry.

Looking to be part of a forward-thinking team that's reshaping IT solutions in Perth? Epic IT is your destination for professional growth, cutting-edge technology, and meaningful work.

What We Offer

• Competitive salary with clear progression criteria
• Funded certification paths — Microsoft, security, cloud, networking, voice
• Direct mentoring from Solutions Architects, with a defined path to Solutions Architect
• Hybrid working — home-based day to day, with 3-4 days in our North Perth office or Brisbane office, and site visits for hardware deployments and complex client work. This isn't a remote-only role; the client site work is real and regular.
• Access to lab environments and test systems, and a modern tooling stack
• A collaborative team where asking questions is encouraged, with regular knowledge-sharing sessions

About the role

Epic IT is a Perth-based, AI-first MSP running production infrastructure for around 72 clients across cloud, networking, telephony and security. An MSP holds the keys to every client it manages, so our own environment has to meet a higher bar than any of theirs. This role makes sure it does.

The work splits roughly 50/50. Half is Epic IT’s internal infrastructure: our Microsoft 365 tenant, identity, devices, network, and the platforms the service team uses every day. The other half is security: our ISO 27001 controls, threat detection and response, and security uplifts for clients.

It suits someone who has been strong at L2 or early L3 and is ready to own a security and infrastructure brief. We don’t expect a perfect match on every line below. If you cover most of it and your fundamentals are solid, we want to hear from you.

What we offer

• Competitive salary with clear progression criteria
• Funded certification paths in Microsoft security and identity, cloud and networking
• Mentoring from our senior engineers and Solutions Architects, with a path into senior security or infrastructure roles
• Based in Perth or Brisbane, hybrid, with occasional client site visits
• Test tenants and a modern tooling stack
• A team where asking questions is normal, with regular knowledge-sharing sessions

What you’ll do

Internal infrastructure. Run Epic IT’s own Microsoft 365 and Entra ID tenant: identity, Conditional Access, Intune, Exchange Online, SharePoint and Teams. Look after our internal network, firewalls and remote access, plus the PSA, RMM, documentation and backup platforms the service team depends on. Set up accounts and devices for new starters, and be the person staff come to when something internal breaks. Write PowerShell for provisioning, reporting and the maintenance jobs nobody should be doing by hand.

Security and compliance. Keep our ISO 27001 controls working, evidence collected and policies current, and help prepare for audits. Manage endpoint protection, application control and threat detection across our environment and our clients’. Triage alerts, run incident response, and write up what happened and what changed. Deliver client security uplifts: Essential Eight controls, MFA and Conditional Access, Defender, and security awareness training. Run access reviews and check vulnerability and patch compliance. You’ll work alongside our security officers in Clark, Philippines.

Documentation. Keep runbooks, configuration baselines, change records and network diagrams current for everything you own. Train the service team on the controls you put in place.

Technical requirements

Core skills:

• 2–4 years hands‑on in an MSP or internal IT role
• Microsoft 365 and Entra ID administration, including Conditional Access, Intune and Exchange Online
• Networking fundamentals: TCP/IP, DNS, DHCP, VLANs, routing, VPNs, firewall rules
• Working knowledge of security tooling such as EDR, MDR or SIEM alerting, and email security
• Windows Server and Active Directory, including hybrid identity
• PowerShell you write yourself, not just scripts you’ve run
• Clear written notes. If you can’t explain what you changed, we can’t audit it

Nice to have

• SC-200, SC-300, MS-102 or AZ-104
• Exposure to ISO 27001, Essential Eight or NIST CSF
• Incident response experience, even on a small scale
• Application allowlisting or MDR platform experience

The team

You’ll work with senior engineers and Solutions Architects who know their stuff, plus a service team that will lean on you. Asking questions is normal here, and we hold regular knowledge-sharing sessions.

What this role isn’t

This isn’t a helpdesk role, and you won’t be working the client phone queue. We don’t micromanage, so you’ll need to run your own priorities and make sound calls without a script. It isn’t fully remote either, because some of the work happens in the office and on client sites.