RFC-0042: Enforcement Standards, v3

Status: OPEN FOR COMMENT

Reviewer (Governance Forum)

"This changes DLP behaviour for every laptop and every inbox in the company. Who owns this?"

Author

"I do."

The honest version of this ad

Most "senior platform engineer" ads are actually admin roles wearing a nicer job title. This one isn't. Somewhere inside a large, regulated organisation, someone needs to own the standard that every proxy rule, every endpoint build, and every email control gets held to, and be the one who can defend that standard in a room full of people who outrank them. That's this role.

What you'd actually be doing
Setting the bar, not applying it: owning configuration standards across web filtering, endpoint protection and email security that delivery teams then build to
Translating governance into engineering: sitting in the platform governance forum and turning committee decisions into change specs and config that actually ships
Making data protection real at the control layer: defining how sensitivity labels actually become enforcement at the proxy and email layer, not just a policy document
Owning the device estate end to end: the full MDM/MAM framework across Windows, Mac, iOS and Android,



compliance baselines and all
Writing the paper trail that survives an audit: runbooks and configuration standards that hold up when a regulator, not just a colleague, comes asking

What you'd bring
5+ years of genuine ownership, not just exposure, across gateway, endpoint and email security platforms
Deep proxy chops: URL filtering, SSL inspection, CASB, and DLP enforcement at the proxy layer specifically
Direct experience owning EDR standards on Windows and macOS, plus MDM/MAM and DMARC across a multi-domain estate
The stomach to sit at a governance table and hold a technical line under pressure, in plain language execs and engineers both understand
Ideally, prior time in a regulated or SOCI-obligated workplace, where "audit-ready" isn't a nice-to-have

What you won't be doing Ticket-driven platform admin. This is a standard-setting seat, and the people implementing your standard report somewhere else.

The practical bit

Permanent role. Open to Sydney or Melbourne, hybrid working. If you've ever wanted to be the "I do" in that RFC thread, this is the role.

📌 Senior Security Engineer Platform Standards Sydney
🏢 RONIN Dynamics
📍 Sydney