CAASM Specialist (runZero / Axonius / Armis) – Federal Government, Canberra

About the role

Canberra-based, fully onsite. A major federal government agency needs a Cyber Asset Attack Surface Management (CAASM) specialist to administer, sustain and optimise its enterprise asset visibility platform, built on runZero. You will own the platform's health, integrations and data quality, find the unknown and unmanaged assets, and write the logic that reconciles unauthenticated network discovery with authoritative internal data. This is hands-on cyber platform work in a sustainment team

Key responsibilities

- Administering, maintaining and optimising the CAASM platform, including configuration, upgrades and troubleshooting
- Monitoring platform health, availability and operational performance
- Building and supporting integrations with enterprise security, network, cloud, identity and asset data sources
- Improving asset visibility and data quality, and identifying unknown or unmanaged assets
- Writing reconciliation and deduplication logic to match unauthenticated fingerprints with authenticated internal data
- Validating network segmentation and tracing subnets to close coverage gaps
- Maintaining operational documentation and driving continuous service improvement
- Producing governance, assurance and reporting outputs
- Contributing to vendor, licence and service-management activities

About you

- Hands-on experience administering runZero or a similar CAASM platform (Axonius, Armis, JupiterOne, Lansweeper or equivalent)
- Experience managing platform integrations, data sources and system connectivity
- Solid understanding of asset discovery and cyber asset visibility concepts
- Strong grasp of operating systems, networking and cloud,



core network protocols, segmentation validation, unauthenticated fingerprinting and subnet tracing
- Experience writing logic for data reconciliation and deduplication across multiple asset sources
- Clear technical documentation, strong analytical and problem-solving skills, and positive stakeholder engagement
- Australian citizenship and the ability to obtain and maintain an NV1 (Negative Vetting Level 1) clearance

Nice to have

- REST APIs, webhooks and automation scripting in Python or PowerShell
- Background in cyber operations, technology governance or risk management
- Experience with the PSPF and ISM
- Vulnerability management experience: discovery, scoring, prioritisation and remediation
- CISSP, CISM, CompTIA Security+ or platform-specific certifications

Security clearance Must have and maintain an NV1 (Negative Vetting Level 1) clearance. If you already hold a clearance, please tell us the level and whether it is active.

Role details

- 12-month initial contract with two 12-month extension options
- Starting January 2027
- Canberra, ACT
- Onsite 5 days a week — no hybrid or remote option
- The client has a contractor stand-down period over December and January, usually 4 to 6 weeks
- Competitive hourly rate

When you apply, we will require

- Confirmation of current clearance (level and whether it is active)
- The CAASM platform(s) you have administered, and for how long
- Confirmation you can work onsite in Canberra 5 days a week
- Your hourly rate, excluding GST
- Your earliest start date

About us ContractRoll Pty Ltd is a Canberra-based boutique labour hire firm, trading since 2019. We have placed multiple talented contractors in large federal government departments and private agencies.

📌 Cyber Asset Attack Surface Management Specialist (runZero / Axonius / Armis) (Canberra)
🏢 ContractRoll
📍 Canberra