This is aimed for a senior security engineer manage and deploy Armis end-end. Assumption is that they can gain Armis specific knowledge once onboarded to the vendor learning platform (eg. integrations section below).

Feel free to alter and trim as required.

Infrastructure & Platform Requirements

- Review and validate Armis architecture against enterprise security and operational requirements.
- Provision and configure Armis appliances (cloud, virtual, or physical) according to vendor best practices.
- Ensure adequate compute, storage, and network capacity for device discovery and telemetry processing.
- Validate high availability, redundancy, and disaster recovery requirements.
- Facilitate recovery procedures for Armis platform components (collectors and brokers).
- Coordinate infrastructure dependencies across server, network, cloud, and security teams.

Network Requirements

- Configure SPAN, TAP, or packet mirror sessions for required network visibility.
- Ensure routing, firewall, and load-balancing requirements are documented and implemented.
- Validate network segmentation and connectivity between Armis collectors and management components.
- Configure required DNS, NTP, and certificate services.
- Assess bandwidth consumption and telemetry flow impacts.
- Verify access to all required device management and monitoring networks.

Security Requirements

- Implement RBAC and least-privilege access controls.
- Integrate with enterprise identity providers (Azure AD, Entra ID, Okta, Active Directory, etc.).




- Configure MFA and privileged access management for administrative accounts.
- Validate data encryption in transit and at rest.
- Review compliance requirements (ISO 27001, Essential Eight, NIST, SOC, CIS benchmarks).
- Establish audit logging and log retention policies.

System Integrations

- Integrate with SIEM platforms (Microsoft Sentinel, Splunk, QRadar, etc.).
- Integrate with vulnerability management platforms (Tenable, Qualys, Rapid7).
- Configure ITSM integration (ServiceNow, Jira, etc.) for incident and asset workflows.
- Integrate with NAC platforms (Cisco ISE, Aruba ClearPass, FortiNAC).
- Configure EDR/XDR integrations where required (Defender for Endpoint, CrowdStrike, SentinelOne).
- Validate API connectivity and authentication methods.

Asset Discovery & Visibility

- Define device discovery scope across IT, OT, IoT, medical, and cloud environments.
- Validate coverage of all network segments and critical assets.
- Establish asset classification and ownership models.
- Configure device tagging, grouping, and business context mapping.
- Validate unmanaged and unknown device identification capabilities.

Cloud & Hybrid Requirements

- Configure cloud connectors (Azure, AWS, GCP) as required.




- Validate permissions and service accounts for cloud inventory collection.
- Ensure secure communication between cloud workloads and Armis.
- Implement governance for multi-cloud environments.

Operational Readiness

- Develop deployment runbooks and standard operating procedures.
- Define monitoring, alerting, and escalation processes with Armis.
- Establish platform health monitoring and capacity management.
- Conduct user acceptance testing and operational validation.
- Deliver knowledge transfer to security operations and infrastructure teams.
- Create support and maintenance procedures.

Project & Governance Requirements

- Perform technical design review and architecture approval.
- Complete security risk assessment and change management requirements.
- Define success criteria and measurable deployment outcomes.
- Produce as-built documentation and configuration baselines.
- Establish ongoing ownership and support model.
- Plan phased rollout and rollback procedures.

Senior Engineer Deliverables

- Presales consulting with clients.
- Solution architecture and deployment design documentation.
- Network and integration design diagrams.
- Security configuration standards.
- Translate overall risk assessment to key stakeholders.
- Conduct and review gap assessments with key stakeholders.
- Operational runbooks and support procedures.
- Test plans and validation results.
- Handover documentation and knowledge transfer sessions.
- Production readiness sign-off.

📌 Principal Consultant, ARMIS - 12 month Fixed Term Contract (Sydney)
🏢 Nexon Asia Pacific
📍 Sydney