Job Description

Baseline Security Clearance Required

n

Senior Platform Engineer | Federal Government | Canberra | Hybrid

n

n
- 6/12 Months + 2 × 12-Month Extensions
n
- Baseline Security Clearance Required
n

n

About the Role

n

Gov Recruit is seeking an experienced Senior Platform Engineer to join a Federal Government Platform Services team responsible for maintaining and continuously improving secure, reliable and supportable ICT infrastructure.

n

This is a technically focused role covering Windows Server, endpoint security, identity and privileged access management, with a strong emphasis on security uplift, vulnerability remediation, platform lifecycle management and infrastructure modernisation.

n

The successful candidate will work across BAU operations and project delivery, collaborating with Cyber Security, infrastructure and application teams, vendors and business stakeholders.

n

The role is based in Canberra with hybrid working arrangements, with flexible work supported in line with business requirements.

n

Key Responsibilities

n

n
- Administer and support enterprise endpoint security and application control platforms.
n
- Manage endpoint protection, EDR, host-based firewalls, vulnerability management and device control technologies.
n
- Configure and maintain platforms including Airlock Digital, Symantec Endpoint Protection and Microsoft Defender.
n
- Manage security policies, application whitelisting, exclusions, agent health and deployments.
n
- Respond to CVEs, vendor advisories, vulnerabilities and security findings.
n
- Undertake impact assessments,



remediation, testing and change implementation.
n
- Support enterprise Windows Server environments, including Server Core.
n
- Perform Windows Server patching, upgrades, migrations, hardening and lifecycle management.
n
- Administer and troubleshoot Active Directory, Entra ID, DNS, PKI, Group Policy, DFS, SCOM, SCCM/MECM and Intune.
n
- Support enterprise identity management platforms including Microsoft Identity Manager and Unify Broker.
n
- Support privileged access management solutions including CyberArk and Secret Server.
n
- Provide technical advice and troubleshooting across identity, authentication, access and privileged access environments.
n
- Develop technical documentation, procedures and knowledge transfer materials.
n

n

Required Skills & Experience

n

n
- Minimum 5 years' relevant experience in platform engineering, systems administration or a related technical discipline.
n
- Strong experience administering enterprise endpoint security platforms.
n
- Experience with application control, endpoint protection, EDR and vulnerability management.
n
- Experience with Airlock Digital, Symantec Endpoint Protection,



Microsoft Defender for Endpoint or comparable enterprise security technologies.
n
- Strong experience responding to CVEs, vulnerabilities, security findings and production incidents.
n
- Detailed knowledge of Windows Server environments.
n
- Strong experience with Active Directory, Entra ID, DNS, PKI, DFS, SCOM, SCCM/MECM and Intune.
n
- Experience with identity and privileged access management.
n
- Strong troubleshooting, analytical and problem-solving skills.
n
- Current Baseline Security Clearance is mandatory.
n

n

Desirable Skills & Experience

n

n
- Knowledge of the Australian Government Information Security Manual (ISM) and Essential Eight.
n
- Experience working within Federal Government or similarly regulated environments.
n
- Red Hat Enterprise Linux administration and Ansible experience.
n
- Experience with Infrastructure-as-Code and CI/CD pipelines.
n
- Experience with Azure DevOps and Azure Arc.
n
- Knowledge of IAM and PAM principles and access governance.
n
- Experience with MIM, Unify Broker, CyberArk or Secret Server.
n
- Strong technical documentation and SOP development skills.
n

n

Technical Setting

n

n
- Windows Server / Server Core
n
- Active Directory / Entra ID
n
- Microsoft Defender
n
- Airlock Digital
n
- Symantec Endpoint Protection
n
- SCOM / SCCM / MECM
n
- Intune
n
- DNS / PKI / DFS / Group Policy
n
- Microsoft Identity Manager / Unify Broker
n
- CyberArk / Secret Server
n
- Azure / Azure Arc
n
- Azure DevOps
n
- Red Hat Enterprise Linux / Ansible
n

📌 Multiple Infrastructure Engineer (Canberra)
🏢 GOV RECRUIT
📍 Canberra