Senior Identity & Security Engineer

SEC Victoria; Melbourne; Hybrid; AUD 110,000 - 140,000; Full time

Job summary

SEC Victoria is seeking a senior security engineer to strengthen identity governance, access controls, and cloud security across Azure, AWS, and on‑prem ecosystems. You will lead privileged access programs, MFA strategies, and IGA implementations while driving automation and secure operations.

You will collaborate with GRC, Architecture, and Technology teams to translate security requirements into scalable, practical controls and to improve threat detection and incident response across SEC’s

Qualifications

• Experience delivering identity and access management capabilities including joiner/mover/leaver, provisioning/deprovisioning, access reviews, RBAC, privileged access, MFA, IGA and Conditional Access.
• Hands-on expertise with Microsoft 365 E5 security technologies (Defender XDR, Defender for Endpoint, Intune, Purview, Microsoft Sentinel) and related security monitoring.
• Proven ability to automate and integrate security capabilities using PowerShell, Python, APIs, Microsoft Graph, KQL and IaC, with strong troubleshooting and stakeholder skills.

Responsibilities

• Shape and maintain SEC Victoria's identity and access governance, privileged access, and authentication controls across cloud and on-prem environments.
• Collaborate with GRC, Architecture, App & Cloud Security, and Technology teams to enhance security engineering and operational resilience.

Skills

Identity & access mgmt

M365 E5 security

Automation scripting

Job description

Join an organisation who’s making a real difference to Victoria's energy future. SEC’s passionate people are working to support the transition to renewable energy and delivering affordable, reliable, renewable energy for all Victorians.

We offer hybrid working with offices in Melbourne’s CBD and Morwell.

What your day could look like

Every day will be different as you work across SEC’s evolving security landscape, partnering with GRC, Architecture, Application & Cloud Security, and Technology teams to deliver and continuously enhance enterprise identity & security engineering. From strengthening identity governance, privileged access and authentication controls to optimising security technologies across cloud, endpoint, network and SaaS environments, you’ll ensure critical security capabilities remain resilient, scalable and fit for purpose.

You’ll also play a key role in security operations, detection & response engineering, improving visibility, telemetry and automation while providing senior technical leadership during investigations and security incidents. Alongside this, you’ll drive cloud, application & security control engineering, translating security risks and requirements into practical technical controls across Azure, AWS, applications and CI/CD environments, helping strengthen SEC’s security posture while enabling secure, efficient technology outcomes across the business.

What you need to be successful

To thrive in this role, you'll bring deep hands‑on security engineering experience, leadership and a passion for continuously improving security outcomes in complex enterprise environments. You'll be comfortable working across identity, cloud and security operations domains, partnering with stakeholders to translate security requirements into practical, scalable solutions while maintaining a strong focus on resilience, automation and operational excellence.

Must have:

• Strong experience delivering identity and access management capabilities, including joiner/mover/leaver processes, provisioning and deprovisioning, access reviews, RBAC, privileged access, MFA, IGA and Conditional Access.
• Hands‑on expertise with Microsoft 365 E5 security technologies, including Defender XDR, Defender for Endpoint, Intune, Purview and Microsoft Sentinel, along with security monitoring, incident response and remediation activities.
• Proven ability to automate and integrate security capabilities using technologies such as PowerShell, Python, APIs, Microsoft Graph, KQL and Infrastructure as Code, coupled with strong troubleshooting, stakeholder engagement and communication skills.

Highly desirable:

• Broad experience across identity security, security engineering, security operations and cloud security, including the design or operation of enterprise IGA/PAM capabilities and modern Zero Trust security approaches.
• Experience securing Azure and AWS environments using cloud-native security services, Infrastructure/Security as Code practices, and working within regulated, critical infrastructure or high‑assurance environments.

What is it like to work at SEC?

Join a team of passionate, purpose‑driven people who care about the work they do and the people they work with. At SEC, our collaborative and inclusive culture means you’ll enjoy working beside people who celebrate each other's achievements. You’ll also do meaningful work, build great relationships, and help shape Victoria's energy future.

We offer flexible working options designed to support individual circumstances. To find more about our purpose and what it’s like to work at SEC, visit us on LinkedIn or our website(secvictoria.com.au).

We strongly encourage applications from Aboriginal and Torres Strait Islander people. We are also deeply committed to building an inclusive workplace that embraces diversity and people with disability, people from the LGBTIQ community, and people from culturally diverse backgrounds. We strive to create a respectful and collaborative workplace culture that allows all employees to thrive.

Other important information:

• You must be an Australian citizen, permanent resident or hold a valid work permit to be eligible to apply.
• To receive this information in an accessible format (such as large print or audio) or if you require any reasonable adjustments during the recruitment process, please reach out to [e-mail].