About the role

Epic IT is a Perth-based, AI-first MSP running production infrastructure for around 72 clients across cloud, networking, telephony and security. An MSP holds the keys to every client it manages, so our own environment has to meet a higher bar than any of theirs. This role makes sure it does.

The work splits roughly 50/50. Half is Epic IT’s internal infrastructure: our Microsoft 365 tenant, identity, devices, network, and the platforms the service team uses every day. The other half is security: our ISO 27001 controls, threat detection and response, and security uplifts for clients.

It suits someone who has been strong at L2 or early L3 and is ready to own a security and infrastructure brief. We don’t expect a perfect match on every line below. If you cover most of it and your fundamentals are solid, we want to hear from you.

What we offer

- Competitive salary with explicit progression criteria
- Funded certification paths in Microsoft security and identity, cloud and networking
- Mentoring from our senior engineers and Solutions Architects, with a path into senior security or infrastructure roles
- Based in Perth or Brisbane, hybrid, with occasional client site visits
- Test tenants and a modern tooling stack
- A team where asking questions is normal, with regular knowledge-sharing sessions

What you’ll do Internal infrastructure. Run Epic IT’s own Microsoft 365 and Entra ID tenant: identity, Conditional Access, Intune, Exchange Online, SharePoint and Teams. Look after our internal network, firewalls and remote access, plus the PSA, RMM, documentation and backup platforms the service team depends on. Set up accounts and devices for new starters, and be the person staff come to when something internal breaks.

Write

PowerShell for provisioning, reporting and the maintenance jobs nobody should be doing by hand.

Security and compliance. Keep our ISO 27001 controls working, evidence collected and policies current,



and help prepare for audits. Manage endpoint protection, application control and threat detection across our environment and our clients’. Triage alerts, run incident response, and write up what happened and what changed.

Deliver client security uplifts: Essential Eight controls, MFA and Conditional Access, Defender, and security awareness training. Run access reviews and check vulnerability and patch compliance. You’ll work alongside our security officers in Clark, Philippines.

Documentation. Keep runbooks, configuration baselines, change records and network diagrams current for everything you own. Train the service team on the controls you put in place.

Technical requirements

Core skills

- 2–4 years hands-on in an MSP or internal IT role
- Microsoft 365 and Entra ID administration, including Conditional Access, Intune and Exchange Online
- Networking fundamentals: TCP/IP, DNS, DHCP, VLANs, routing, VPNs, firewall rules
- Working knowledge of security tooling such as EDR, MDR or SIEM alerting, and email security
- Windows Server and Active Directory, including hybrid identity
- PowerShell you write yourself, not just scripts you’ve run
- Clear written notes. If you can’t explain what you changed, we can’t audit it

Nice to have:
- SC-200, SC-300, MS-102 or AZ-104
- Exposure to ISO 27001, Essential Eight or NIST CSF
- Incident response experience, even on a small scale
- Application allowlisting or MDR platform experience
- Azure infrastructure experience

The team You’ll work with senior engineers and Solutions Architects who know their stuff, plus a service team that will lean on you. Asking questions is normal here, and we hold regular knowledge-sharing sessions.

What this role isn’t

This isn’t a helpdesk role, and you won’t be working the client phone queue. We don’t micromanage, so you’ll need to run your own priorities and make sound calls without a script. It isn’t fully remote either, because some of the work happens in the office and on client sites.

📌 Security & Internal Infrastructure Engineer (Perth)
🏢 Epic IT
📍 Perth