About the role

We are seeking an experienced Cloud Security Specialist to support the secure transition and expansion of a large-scale Enterprise Data Platform (EDP) within a government environment.

This is a hands-on, specialist engagement focused on designing, implementing and assuring robust security controls across Microsoft Azure, Microsoft Fabric and associated data, analytics, governance and integration services.

Key responsibilities

- Define, maintain and implement the end-to-end security architecture, target-state roadmap, reusable security patterns and security guardrails across the Enterprise Data Platform.
- Design and implement role-based access control (RBAC), role catalogues, user access matrices and persona-based access arrangements.
- Map user roles and entitlements across Microsoft Entra ID, Azure RBAC, Microsoft Fabric and associated data services.
- Establish least-privilege, segregation-of-duties, Privileged Identity Management (PIM), Just-In-Time access, access reviews and recertification controls.
- Define authentication, single sign-on and privileged access management approaches aligned with departmental security standards.
- Establish security controls for service principals, managed identities, workload identities, APIs, integration accounts, secrets, keys and certificates.
- Design and govern fine-grained data access controls, including row-level, object-level and column-level security, data masking and attribute-based access.
- Define and implement data protection controls covering classification, encryption, key management, retention, disposal, lineage, access logging and data loss prevention.
- Establish security requirements and integration patterns across Azure data services, Microsoft Fabric, Power BI, Microsoft Purview and associated data and analytics technologies.
- Lead the implementation and remediation of security treatments arising from Threat Risk Assessments, security assessments, audits, penetration tests and independent security reviews.
- Develop and maintain the EDP Security Controls Matrix, documenting security requirements, control owners, implementation status, evidence, testing outcomes, exceptions and residual risks.




- Define secure development and deployment practices covering source control, CI/CD pipelines, Infrastructure as Code, deployment identities, release governance and environment segregation.
- Validate logging, monitoring, alerting, vulnerability management, backup, recovery and incident-response requirements, including integration with departmental SIEM services.
- Develop security metrics, assurance reporting and supporting documentation, and provide knowledge transfer to operational teams.

Highly desirable criteria

- Demonstrated experience securing Microsoft Fabric, Microsoft Purview, Profisee, RStudio or dbt Cloud environments.
- Experience working with PROTECTED information workloads and implementing security controls for highly sensitive government data.
- Strong understanding of the Australian Government Information Security Manual (ISM) and IRAP assessment processes.
- Experience working within large-scale government, public-sector or highly regulated environments.
- Relevant industry certifications such as CISSP, CCSP, SABSA, Microsoft Cybersecurity Architect, Microsoft Identity and Access Administrator or Microsoft Azure Security Engineer.

Desirable criteria

- Experience developing security architecture roadmaps, security control matrices, role catalogues, access matrices and assurance documentation.
- Experience with Terraform, Infrastructure as Code, CI/CD security, source control and secure release management.
- Knowledge of cloud security shared-responsibility models and supplier security assurance.
- Experience integrating cloud platforms with enterprise SIEM, security monitoring and incident-response services.
- Experience conducting security assessments and coordinating remediation activities through to independent assurance.
- Relevant architecture or security certifications, including TOGAF or equivalent.

Skills and experience





- Extensive experience in cyber security, cloud security, data security, identity and access management or enterprise security architecture.
- Demonstrated experience designing, implementing and assuring security controls across enterprise cloud and data platforms.
- Strong understanding of Zero Trust principles, least privilege, segregation of duties and defence in depth.
- Practical experience with Microsoft Entra ID, Azure RBAC, Privileged Identity Management, Conditional Access, Identity Governance and access reviews.
- Experience implementing fine-grained data access controls across SQL, Power BI semantic models, data warehouses, lakehouses and self-service analytics platforms.
- Robust technical knowledge of Microsoft Azure data services, Microsoft Fabric, Power BI, Azure SQL, SQL Server and Azure Data Lake Storage.
- Experience managing non-human identities, service accounts, integration accounts, secrets, certificates, keys and credential lifecycle controls.
- Knowledge of secure CI/CD pipelines, Infrastructure as Code, deployment permissions, release governance and cloud security practices.
- Ability to translate security assessments, audit findings and risk assessments into practical security treatments and remediation plans.
- Strong experience producing security architectures, technical documentation, security roadmaps, control matrices and assurance evidence.
- Understanding of cloud logging, monitoring, vulnerability management, backup, recovery and incident-response requirements.
- Excellent stakeholder engagement and communication skills, with the ability to work collaboratively across technical, security, architecture, data governance and business teams.
- Ability to provide practical security advice, manage competing priorities and transfer specialist knowledge to operational teams.

Contact details For a confidential chat, please contact Shruthi on 0474 545 379 or via email at [email protected] and we would be more than happy to provide you with additional information and assist in the application process. Please note that a National Police Check might be required as part of pre-employment screening.

📌 Cloud Security Specialist (Brisbane)
🏢 Exclaim IT
📍 Brisbane