We are seeking an experienced, hands-on Systems Engineer for a contract opportunity with our client This role will focus on strengthening the security, compliance and governance of on-premises Active Directory and Microsoft Entra ID environments. You will review existing audit findings, develop automated auditing and remediation solutions, implement security controls, and establish proactive monitoring to identify and address emerging risks. The successful candidate will combine solid Microsoft identity and infrastructure expertise with PowerShell scripting, automation and practical security remediation experience.

Key Responsibilities

- Review existing audit findings and recommendations for on-premises Active Directory and Microsoft Entra ID.
- Audit directory environments against security and governance requirements.
- Develop PowerShell scripts and automated solutions to identify configuration gaps and compliance issues.
- Build automated monitoring, reporting and alerting to identify emerging security risks.
- Develop and maintain procedures to ensure ongoing directory security and compliance.
- Assess security risks where recommended controls cannot be implemented and develop appropriate mitigating controls.
- Review proposed Australian Government Information Security Manual (ISM) controls and identify implementation requirements.
- Develop work packages, effort estimates and implementation plans to address identified security gaps.




- Implement approved security improvements and remediation activities.
- Manage service account governance, privileged accounts and directory security controls. Key Skills and Experience
- Strong hands-on experience with on-premises Active Directory and Microsoft Entra ID (formerly Azure AD).
- Proven experience auditing directory environments, identifying security gaps and implementing remediation.
- Strong PowerShell scripting skills, including automation of security checks and reporting.
- Experience with Azure Automation Runbooks, Logic Apps or comparable automation technologies.
- Understanding of identity security, privileged accounts, service account management and access controls.
- Experience developing security procedures, risk assessments and mitigating controls.
- Knowledge of security compliance frameworks, ideally the ASD Information Security Manual (ISM), Essential Eight or equivalent standards.
- Experience with monitoring, alerting and automated remediation. Desirable Experience
- CyberArk or other Privileged Access Management (PAM) solutions.
- Managing multiple Active Directory forests.
- Break-glass account governance and privileged account tiering.
- Automated service account provisioning and password rotation.
- Experience in government, education or other regulated environments. Apply now or contact us for a confidential discussion.

📌 System Engineer (Brisbane)
🏢 Data#3
📍 Brisbane