SOE Engineer

Rashi Joshi; Canberra; On-site; AUD 120,000 - 150,000; Full time

Job summary

Rashi Joshi in Canberra is seeking a mid-to-senior EUC/Modern Workplace Engineer to own the desktop environment and drive a high-impact endpoint security uplift.

You will lead the migration from Ivanti Application Control to Windows Defender Application Control (WDAC), manage Windows 11 devices via Microsoft Intune, Autopilot, and security baselines, and automate tasks with PowerShell. Hybrid Canberra location.

Qualifications

• Experience managing or engineering modern Windows 11 environments.
• Strong PowerShell scripting and automation capability.
• Experience with Intune, WDAC/ Defender security controls.
• Ability to work autonomously with minimal supervision.

Responsibilities

• Lead the migration from Ivanti Application Control to Windows Defender Application Control (WDAC).
• Manage Windows 11 devices through Microsoft Intune, including Autopilot, compliance policies and configuration profiles.
• Package and deploy applications using Intune and modern endpoint management practices.
• Manage Windows Update for Business and endpoint patching strategy.
• Support and maintain SOE standards, security baselines and endpoint protection controls.
• Automate administrative tasks using PowerShell and Microsoft Graph.
• Manage mobile devices, MDM/MAM policies and BYOD initiatives.
• Provide occasional end-user support and onboarding activities where required.

Skills

Intune administration

Windows 11 management

WDAC

Defender

BitLocker

ASR rules

PowerShell scripting

Automation

App packaging

Microsoft Graph

Azure Cloud

Autopilot

Federal Gov experience

Independent worker

Job description

Your new company Join a small, high-performing Federal Government team where you'll take ownership of the desktop environment and help drive a significant endpoint security and modern workplace uplift. This is not a heavily process-driven environment where work is handed to you step-by-step. The team is looking for someone who is confident working independently, comfortable making technical decisions, and able to take ownership of initiatives from planning through to delivery. A key focus of the role will be leading the migration from Ivanti Application Control to Windows Defender Application Control (WDAC), while continuing to improve the organisation's Microsoft Intune, endpoint security, and modern device management capabilities.

Your new role

• Lead the migration from Ivanti Application Control to Windows Defender Application Control (WDAC).
• Manage Windows 11 devices through Microsoft Intune, including Autopilot, compliance policies and configuration profiles.
• Package and deploy applications using Intune and modern endpoint management practices.
• Manage Windows Update for Business and endpoint patching strategy.
• Support and maintain SOE standards, security baselines and endpoint protection controls.
• Automate administrative tasks using PowerShell and Microsoft Graph.
• Manage mobile devices, MDM/MAM policies and contribute to BYOD initiatives.
• Provide occasional end-user support and onboarding activities where required.

What you'll need to succeed

• Strong Microsoft Intune administration experience.
• Proven experience managing or engineering modern Windows 11 environments.
• Experience with WDAC, Defender, BitLocker, ASR rules and endpoint security controls.
• Strong PowerShell scripting and automation capability.
• Experience managing application packaging and deployment.
• Exposure to Microsoft Graph and modern device management practices.
• Azure Cloud experience within a Federal Government environment is highly desirable.
• The ability to work autonomously, identify improvements, and deliver outcomes with minimal supervision.

What you get in return

This role would suit a mid-to-senior EUC, Modern Workplace or SOE Engineer who enjoys owning their environment rather than simply operating it. You'll have the opportunity to influence endpoint management strategy, improve security posture, and play a key role in several modernisation initiatives.

What you need to know

• Canberra location with hybrid working arrangements.
• Initial contract through to EOFY 2027.
• Up to two further 12-month extension options available.
• Baseline Security Clearance preferred.