Senior Identity & Security Engineer

SEC Recruitment; Melbourne; Hybrid; AUD 120,000 - 190,000; Full time

Job summary

SEC Victoria is seeking a senior security engineer to join our team across identity, cloud and security operations, delivering practical controls in Azure, AWS, and CI/CD environments.

You will lead governance, architecture and security operations to strengthen identity management, privileged access, and threat detection, while driving automation and resilient security outcomes. Hybrid work with Melbourne CBD and Morwell offices supports a positive balance.

Qualifications

• Must have strong experience delivering identity and access management capabilities, including joiner/mover/leaver processes, provisioning and deprovisioning, access reviews, RBAC, privileged access, MFA, IGA and Conditional Access.
• Hands‑on expertise with Microsoft 365 E5 security technologies, including Defender XDR, Defender for Endpoint, Intune, Purview and Microsoft Sentinel, along with security monitoring, incident response and remediation activities.
• Proven ability to automate and integrate security capabilities using technologies such as PowerShell, Python, APIs, Microsoft Graph, KQL and Infrastructure as Code, coupled with strong troubleshooting, stakeholder engagement and communication skills.

Responsibilities

• Lead across identity, cloud and security operations to translate requirements into practical, scalable controls.
• Drive cloud, application and security control engineering across Azure, AWS and CI/CD environments.
• Provide senior technical leadership during investigations and security incidents, ensuring resilient, secure outcomes.

Skills

Identity & Access Management

RBAC

Privileged Access

MFA

IGA

Conditional Access

Microsoft 365 E5 security

Defender XDR

Defender for Endpoint

Intune

Purview

Microsoft Sentinel

PowerShell

Python

APIs

Microsoft Graph

KQL

Infrastructure as Code

Tools

PowerShell

Python

APIs

Microsoft Graph

Infrastructure as Code

Job description

Do work that makes a difference

Join an organisation who’s making a real difference to Victoria's energy future. SEC’s passionate people are working to support the transition to renewable energy and delivering affordable, reliable, renewable energy for all Victorians.

We offer hybrid working with offices in Melbourne’s CBD and Morwell.

What your day could look like

Every day will be different as you work across SEC’s evolving security landscape, partnering with GRC, Architecture, Application & Cloud Security, and Technology teams to deliver and continuously enhance enterprise identity & security engineering. From strengthening identity governance, privileged access and authentication controls to optimising security technologies across cloud, endpoint, network and SaaS environments, you’ll ensure critical security capabilities remain resilient, scalable and fit for purpose.

You’ll also play a key role in security operations, detection & response engineering, improving visibility, telemetry and automation while providing senior technical leadership during investigations and security incidents. Alongside this, you’ll drive cloud, application & security control engineering, translating security risks and requirements into practical technical controls across Azure, AWS, applications and CI/CD environments, helping strengthen SEC’s security posture while enabling secure, efficient technology outcomes across the business.

What you need to be successful

To thrive in this role, you'll bring deep hands-on security engineering experience, leadership and a passion for continuously improving security outcomes in complex enterprise environments. You'll be comfortable working across identity, cloud and security operations domains, partnering with stakeholders to translate security requirements into practical, scalable solutions while maintaining a strong focus on resilience, automation and operational excellence.

Must have:

• Strong experience delivering identity and access management capabilities, including joiner/mover/leaver processes, provisioning and deprovisioning, access reviews, RBAC, privileged access, MFA, IGA and Conditional Access.
• Hands‑on expertise with Microsoft 365 E5 security technologies, including Defender XDR, Defender for Endpoint, Intune, Purview and Microsoft Sentinel, along with security monitoring, incident response and remediation activities.
• Proven ability to automate and integrate security capabilities using technologies such as PowerShell, Python, APIs, Microsoft Graph, KQL and Infrastructure as Code, coupled with strong troubleshooting, stakeholder engagement and communication skills.

23rd October, 2026

Highly desirable

• Broad experience across identity security, security engineering, security operations and cloud security, including the design or operation of enterprise IGA/PAM capabilities and modern Zero Trust security approaches.
• Experience securing Azure and AWS environments using cloud-native security services, Infrastructure/Security as Code practices, and working within regulated, critical infrastructure or high-assurance environments.

What is it like to work at SEC?

Join a team of passionate, purpose-driven people who care about the work they do and the people they work with. At SEC, our collaborative and inclusive culture means you’ll enjoy working beside people who celebrate each other's achievements. You’ll also do meaningful work, build great relationships, and help shape Victoria's energy future.

We offer flexible working options designed to support individual circumstances. To find more about our purpose and what it’s like to work at SEC, visit us on LinkedIn or our website(secvictoria.com.au).

EEO & inclusion

We strongly encourage applications from Aboriginal and Torres Strait Islander people. We are also deeply committed to building an inclusive workplace that embraces diversity and people with disability, people from the LGBTIQ community, and people from culturally diverse backgrounds. We strive to create a respectful and collaborative workplace culture that allows all employees to thrive.

For further information and to explore this opportunity further, contact ***********@secvictoria.com.au.

Other important information

• You must be an Australian citizen, permanent resident or hold a valid work permit to be eligible to apply.
• To receive this information in an accessible format (such as large print or audio) or if you require any reasonable adjustments during the recruitment process, please reach out to ***********@secvictoria.com.au.

Data collection

SEC engages a third‑party recruitment provider to assist with applications and assessments. This may include collecting information such as your contact details, employment history, qualifications, referee details, and assessment results (including psychometric test results, which may constitute sensitive information). Your personal information is collected and used for the purpose of assessing your suitability for employment and managing the recruitment process. By submitting your application, you consent to SEC and our recruitment provider collecting, using, and disclosing your personal and sensitive information for these purposes. SEC and its service providers will handle your information in accordance with applicable privacy laws and SEC’s Privacy Policy, available online at https://www.secvictoria.com.au/privacy-policy. You may request access to, or correction of, your personal information by contacting SEC at *******@secvictoria.com.au.