The Role

As an EL1 Azure Security Engineer you will work independently with reasonable autonomy and accountability to achieve outcomes of existing technology delivery plans. You will work alongside other Cloud Division cloud engineers, solution architects and mission teams to contribute to the successful delivery of platform solutions in support of ASD capability.

EL1 Azure Security Engineer:

• Successfully use and understand automation and scripting, PowerShell and Azure CLI for automation of tasks, managing resources and executing deployment scripts.
• Utilize ARM/BICEP templates, Infrastructure as Code (IaC) for automated resource deployment.
• Understanding of EntraID, including strong understanding of configuring user groups and roles
• Implementing secure sign on solutions, with experience in authentication.
• Applying security and governance, Azure security best practices, implement security measures like Azure security centre, network security groups/perimeters and firewalls.
• Contribute to successful utilisation of cloud resources such as virtual networks, storage and compute instances.
• Designing and maintaining Azure DevOps for implementing CI/CD pipelines for automating infrastructure management.
• Ensure the correct management of user permissions and access policies
• Implement Policy and blueprints, enforcing governance and compliance across the Azure environment.
• Drive and lead the selection and integration of automation tools, ensuring alignment of business and technical requirements.
• Responding to incidents and troubleshooting issues related to cloud infrastructure.
• Assisting with performing root cause analysis and implementing preventive measures to avoid future incidents.
• Work collaboratively with stakeholders and subject matter experts to progress cloud business activities
• Ensuring that cloud infrastructure complies with security standards and regulations, such as the Information Security Manual (ISM) and the Protective Security Policy Framework (PSPF).

As an EL1 Lead Security Engineer you will play a pivotal role in ensuring ASD’s security systems are effectively maintained through implementing and testing new security features, planning computer and network upgrades, troubleshooting, and responding to security incidents.

EL1 Lead Security Engineer:

• Accountable for managing allocated resources, setting work priorities and managing workflows to ensure accurate completion of work within timeframes and quality requirements.
• Accountable for accurate completion of work within timeframes and quality requirements, sharing own expertise with others and guiding and mentoring less experienced employees.
• Lead the development and implementation of strategies and the evaluation of business outcomes to ensure continuous improvement in the delivery of ICT security.
• Deliver risk assessments, business impact analysis and assurance for information systems within the organisation.
• Analyse security risks and business impacts and provide guidance on security strategies to manage identified risks.
• Maintain knowledge, skills and experience of general security issues and apply to IT security risk analysis.
• Engage with internal and external stakeholders from other technical specialties to share and develop ICT security policy.
• Lead the application and compliance of security operations procedures and review information systems for actual or potential security controls to achieve Authority to Operate accreditation.
• Negotiate with ICT engineers and ICT Security in the development and approval of Concept of Operations, System Security Plans and Executive briefs to achieve an Authority to Operate accreditation.

Further information can be found at: I’m changing my career | Australian Signals Directorate (asd.gov.au)

About our Team

ASD’s Capability and Transformation Group has a broad scope of responsibilities, ranging from the delivery and execution of leading-edge mission capability and tools to an overarching portfolio view of ASD and the implementation of REDSPICE. The five Divisions include Cloud, Enterprise Technology, Mission Capability, Mission Data and Portfolio & Transformation.

Each Division drives project management maturity improvements and is comprised of members of diverse skills and disciplines who work together to deliver positive capability development outcomes for all stakeholders. By partnering with these stakeholders, including Air Force, Army, Navy and other Defence Groups, we deliver complex capability projects/programs to enable ASD and the ADF to stay ahead of technical advancements in the region.

With a diverse range of projects and roles available, this is your opportunity to combine both your skills and interests to contribute to the ongoing success of ASD.

ASD offers excellent training, mentoring and development opportunities as well as a competitive salary and benefits packages.

Our Ideal Candidate

EL1 Azure Security Engineer:

• Hands-on experience in implementing, configuring, and maintaining EntraID & Azure services.
• Experience in Azure infrastructure, virtual machines, networking, storage and identity and access management including RBAC.
• Knowledge and experience with Azure Policy and blueprints.
• Experience in infrastructure deployment and management tasks through scripting.
• Ensuring cloud infrastructure adheres to governance policies and compliance requirements.
• Configuring and managing cloud networking components.
• Proven experience in managing ICT hosting or cloud platforms.
• Ensuring compliance with national security regulations.
• Robust communication skills, including the ability to explain complex problems to management.

EL1 Lead Security Engineer:

• Industry experience, formal training or a particular domain expertise.
• A deep understanding of the architecture, administration and management of operating systems like Linux and Windows.
• As appropriate, have a deep understanding of firewalls and the nuances and benefits of differing firewalls.
• Ability to design and implement enterprise solutions in AWS or Azure.
• Proficiency in configuring centralised audit, SIEM and SOAR capabilities.
• Demonstrated experience authoring and ensuring compliance with cloud policy.
• Experience in directing teams and developing junior staff.
• Ability to communicate with both technical and non-technical people using varied communication styles to effectively engage with a range of audiences.
• Security engineering knowledge and experience to assess risks and uncertainties and consider these in planning, decision-making and priority setting for the team.
• Will drive solutions to overcome the security risks and business impacts.
• As part of ASD’s technical leadership groups, our ideal candidate will provide leadership, technical and planning knowledge and experience, ensuring the overarching security architecture meets business objectives and requirements.

ASD is seeking applicants to fill current and anticipated vacancies and to create a merit pool for future vacancies. In line with the Australian Public Service Commissioner’s Direction 2022, upon completion of the recruitment activity, the merit pool will be available to locations across Australia.

Application Closing Date: Sunday 12 October, 2025

For further information please review the job information pack, reference ASD/07885/25 on www.asd.gov.au/careers.