Role purpose The ICT Network Systems Engineer is responsible for the planning, design, implementation, administration, security and ongoing performance of the college's ICT infrastructure: the local and wide area network, wireless, servers, virtualisation, cloud platforms, identity and access systems, endpoint and device-management platforms, and backup and recovery systems that underpin teaching, learning and administration.
Working under the broad direction of the Principal class and Business Manager, the position analyses network and systems requirements, designs, implements, configures and tests ICT network and systems solutions, monitors and optimises performance, troubleshoots and resolves complex faults, ensures security and compliance with Department of Education (DE) technical and cyber security standards, and provides expert technical advice to college leadership and staff.
The position exercises independent technical judgement and is accountable for the reliability and security of systems that the whole college depends on.
Key responsibilities
1. Network engineering and design •Analyse requirements and plan, design, engineer, deploy and test the college network infrastructure, including core and edge switching, routing, VLAN segmentation, wireless, firewall, internet and remote-access services, in line with DE technical standards.
•Research, evaluate and recommend network hardware, software and services; prepare specifications for procurement and coordinate structured cabling, fibre and vendor works.
•Analyse network performance, capacity and availability data; model and plan capacity; and engineer configuration changes to optimise performance and meet service requirements.
•Design and implement segregated network architecture for security systems, building services, guest and BYOD access in accordance with DE security requirements.
•Own network configuration management, including IP addressing design, topology diagrams, configuration baselines and configuration backups.
2. Systems and cloud engineering •Design, build,



configure and optimise on-premises and cloud server environments in a multi-platform setting, including Windows Server roles (Active Directory, Group Policy, DHCP, DNS, file and print), virtualisation platforms, Microsoft 365, Microsoft Entra ID and Google Workspace.
•Design and implement the identity and access management architecture, including user lifecycle automation, authentication, authorisation and integration with DE identity services.
•Plan and engineer patch and update strategies, capacity planning, performance tuning and licensing models across servers and cloud services, and ensure operational readiness of systems.
•Define and maintain system engineering standards, build procedures, configuration baselines and change records.
3. Endpoint and device-management engineering •Design, implement and configure device-management platforms (Microsoft Intune, Apple School Manager, Google Admin) for Windows, Apple and ChromeOS fleets, including enrolment architecture, configuration profiles, compliance policies and application deployment.
•Design the device lifecycle framework: standards, technical specifications for procurement, imaging and provisioning automation, deployment, refresh planning and secure disposal in line with DE asset-management policy.
4. Cyber security, backup and business continuity •Design, implement and test security controls across network, server, identity and endpoint layers in accordance with DE cyber security policy; engineer endpoint protection and lead the technical response to security incidents and alerts.
•Design, implement and test backup and disaster-recovery solutions; maintain recovery documentation and perform periodic restore testing.
•Conduct system hardening,



vulnerability remediation, access reviews and log auditing; maintain the college ICT risk register and support DE security audits and compliance reporting.
5. Technical escalation, advice and documentation •Act as the senior technical escalation point for complex network, server, identity, device-management and security faults; perform root-cause analysis and engineer permanent resolutions.
•Develop and maintain technical documentation, knowledge-base articles, standard operating procedures and best-practice guides for network and systems configuration, operation and recovery.
•Provide expert technical advice to the Principal class and Business Manager on network and systems architecture, infrastructure strategy, investment, procurement and risk; contribute to ICT planning and present to leadership and staff as required.
•Lead or contribute to infrastructure projects from scoping through implementation, documentation and handover, applying change-management practice.
•Ensure the operational readiness and resilience of DE-approved platforms and college ICT systems, including during peak periods such as term start and examinations.
Qualifications and requirements ·Tertiary qualification in Information Technology, Networking, Computer Science or a related discipline (Bachelor or higher), or equivalent industry experience.
·Minimum two years' relevant experience in network and systems engineering or administration, including at least one year post-qualification experience) ·Experience within an education environment is preferred.
·Industry certifications highly regarded: CompTIA Security+, Microsoft (MD-102 / AZ-104 / SC-300), Cisco CCNA, ITIL 4, AWS Cloud Practitioner.
·Current Victorian Working with Children Check (Employee) and satisfactory National Police Check.
Eligibility Applicants must hold, or be eligible to hold, the right to work in Australia, a current Victorian Working with Children Check (Employee) and a satisfactory National Police Check.

📌 Ict Network And Systems Engineer (Melbourne)
🏢 Crairgieburn Secondary College
📍 Melbourne