Secure Gateway Engineer in Canberra

As a System / SME / COTS Product, you will be a hands‑on technical lead responsible for the detailed design, implementation, configuration, and operation of secure information exchange solutions (Guards and Gateways) within a Federated Mission Networking (FMN) environment. Reporting to the Solution Architect and working within an Agile team, you will focus specifically on deploying and maintaining core security technologies, notably Palo Alto Networks firewalls and Isode M‑Guard cross‑domain solutions. Your expertise will be crucial in ensuring these systems meet stringent data‑centric security requirements and achieve full Defence compliance.

Key Responsibilities

• Provide deep technical expertise for the implementation and operational support of all FMN security components.
• Design, configure, deploy, and manage Palo Alto Networks Next‑Generation Firewalls (NGFWs), including setting up security policies, NAT rules, VPN tunnels (IPsec/SSL), App‑ID, and Threat Prevention profiles across physical and virtual appliances.
• Install, configure, and maintain Isode M-Guard systems as application‑level data diodes, specialising in secure message transfer, directory integration (LDAP/X.500), XML schema validation, and security label enforcement (e.g., in compliance with STANAG 4774/4778).
• Translate high‑level architectural designs and business requirements into detailed engineering specifications, build documents, and standard operating procedures (SOPs).
• Ensure all engineering solutions adhere to mandated Defence Standardisation Agreements and national security accreditation requirements.
• Collaborate closely with the Business Analyst and Solution Architect during requirements analysis and design phases, providing expert insight into product capabilities and limitations.
• Actively participate in the agile delivery process, including refining user stories, contributing technical estimates during sprint planning, and documenting detailed acceptance criteria.
• Conduct comprehensive testing of implemented solutions, including performance tuning, security audits, and formal User Acceptance Testing (UAT) support.
• Troubleshoot complex technical issues across multi‑vendor security solutions, often in high‑pressure operational environments.
• Maintain accurate system documentation, participate in agile ceremonies (sprint planning, daily stand‑ups, retrospectives), and mentor junior engineers on specific product skills.

Required Skills and Qualifications

• Education: A Bachelor's degree in Computer Science, IT, Engineering, or a related technical discipline.
• Experience: Extensive hands‑on experience (typically 5+ years) in network security engineering or systems engineering roles within complex, highly secure environments (Defence/Government sector preferred). Proven experience working within an Agile delivery framework (Scrum, Kanban, SAFe). Proven experience in deploying and managing IT systems that must adhere to stringent compliance frameworks (e.g., military security policies, ISO 27001, NIST standards).
• Technical Expertise: In‑depth, practical experience with firewalls (PA‑Series, VM‑Series) and management tools (Panorama). Expert knowledge of PAN‑OS features is required.
• Cross‑Domain Solutions: Hands‑on experience with Isode M‑Guard or comparable CDS/data diode technologies (e.g., Owl Cyber Defense, Forcepoint High Speed Guard). Familiarity with application‑level gateway functions and secure messaging is essential. Strong background in general networking protocols, TCP/IP fundamentals, routing, switching, VPNs, and foundational cybersecurity principles. Experience with scripting and automation (e.g., Python, Ansible) for configuration management and deployment is highly advantageous.
• Soft Skills: Exceptional problem‑solving skills and attention to detail. Ability to work independently as a subject matter expert while integrating seamlessly into a collaborative, cross‑functional agile team. Excellent verbal and written communication skills to articulate complex technical concepts to peers, management, and military stakeholders.

Desirable Qualifications

• Certifications: Hold current, advanced certifications such as PCNSE (Palo Alto Networks Certified Network Security Engineer), CISSP Certification, or other relevant security/networking vendor certifications. Experience with virtualization technologies (VMware, Hyper‑V) and secure containerisation (Docker, Kubernetes).