This is aimed for a senior security engineer manage and deploy Armis end-end. Assumption is that they can gain Armis specific knowledge once onboarded to the vendor learning platform (eg. integrations section below). Feel free to alter and trim as required. Infrastructure & Platform Requirements
• Review and validate Armis architecture against enterprise security and operational requirements.
• Provision and configure Armis appliances (cloud, virtual, or physical) according to vendor best practices.
• Ensure adequate compute, storage, and network capacity for device discovery and telemetry processing.
• Validate high availability, redundancy, and disaster recovery requirements.
• Facilitate recovery procedures for Armis platform components (collectors and brokers).
• Coordinate infrastructure dependencies across server, network, cloud, and security teams. Network Requirements
• Configure SPAN, TAP, or packet mirror sessions for required network visibility.
• Ensure routing, firewall, and load-balancing requirements are documented and implemented.
• Validate network segmentation and connectivity between Armis collectors and management components.
• Configure required DNS, NTP, and certificate services.
• Assess bandwidth consumption and telemetry flow impacts.
• Verify access to all required device management and monitoring networks. Security Requirements
• Implement RBAC and least-privilege access controls.
• Integrate with enterprise identity providers (Azure AD, Entra ID, Okta, Active Directory, etc.).
• Configure MFA and privileged access management for administrative accounts.




• Validate data encryption in transit and at rest.
• Review compliance requirements (ISO 27001, Essential Eight, NIST, SOC, CIS benchmarks).
• Establish audit logging and log retention policies. System Integrations
• Integrate with SIEM platforms (Microsoft Sentinel, Splunk, QRadar, etc.).
• Integrate with vulnerability management platforms (Tenable, Qualys, Rapid7).
• Configure ITSM integration (ServiceNow, Jira, etc.) for incident and asset workflows.
• Integrate with NAC platforms (Cisco ISE, Aruba ClearPass, FortiNAC).
• Configure EDR/XDR integrations where required (Defender for Endpoint, CrowdStrike, SentinelOne).
• Validate API connectivity and authentication methods. Asset Discovery & Visibility
• Define device discovery scope across IT, OT, IoT, medical, and cloud environments.
• Validate coverage of all network segments and critical assets.
• Establish asset classification and ownership models.
• Configure device tagging, grouping, and business context mapping.
• Validate unmanaged and unknown device identification capabilities. Cloud & Hybrid Requirements
• Configure cloud connectors (Azure, AWS, GCP) as required.




• Validate permissions and service accounts for cloud inventory collection.
• Ensure secure communication between cloud workloads and Armis.
• Implement governance for multi-cloud environments. Operational Readiness
• Develop deployment runbooks and standard operating procedures.
• Define monitoring, alerting, and escalation processes with Armis.
• Establish platform health monitoring and capacity management.
• Conduct user acceptance testing and operational validation.
• Deliver knowledge transfer to security operations and infrastructure teams.
• Create support and maintenance procedures. Project & Governance Requirements
• Perform technical design review and architecture approval.
• Complete security risk assessment and change management requirements.
• Define success criteria and measurable deployment outcomes.
• Produce as-built documentation and configuration baselines.
• Establish ongoing ownership and support model.
• Plan phased rollout and rollback procedures. Senior Engineer Deliverables
• Presales consulting with clients.
• Solution architecture and deployment design documentation.
• Network and integration design diagrams.
• Security configuration standards.
• Translate overall risk assessment to key stakeholders.
• Conduct and review gap assessments with key stakeholders.
• Operational runbooks and support procedures.
• Test plans and validation results.
• Handover documentation and knowledge transfer sessions.
• Production readiness sign-off.

📌 Principal Consultant, ARMIS (Sydney)
🏢 Nexon Asia Pacific
📍 Sydney