We are recruiting for a Infrastructure & Security Engineer our client located in Sydney,Australia as a contract role.
Position - Infrastructure & Security Engineer
Location – Sydney
Long term contract/ Hybrid
Key Responsibilities
- Own day-to-day infrastructure operations across servers, virtualisation (VMware/Hyper-V), Active Directory, Entra ID, Microsoft 365, DNS, DHCP, and core network services across all sites
- Patching and configuration: Execute routine patching cycles, configuration changes and lifecycle activities under change management
- Lead systematic remediation of penetration testing findings: triage by severity, build plans, execute fixes, and verify closure
- Own the vulnerability management cycle: scan, prioritise, remediate, report residual risk weekly
- Triage security alerts from CrowdStrike Falcon, Mimecast, Netskope, and ADAudit Plus and integrate them into ITIL workflows
- Build and maintain runbooks and SOPs for every platform task, with the explicit goal of removing single-resource dependency
- Own backup and recovery operations via Veeam, monitor daily, and maintain DR readiness through regular failover testing, including SAN environments
- Drive the on-premises to cloud migrations: assess workloads, plan waves, execute lift-and-shift and re-platform moves, and validate post-migration performance and security
- Participate actively in change management, technical risk assessments and implementation reviews.
- Operate under least-privilege and PIM elevation models, follow ITIL change, incident and problem-management practices, and participate in the on-call roster.
- Crosstrain Operations Engineers and actively share knowledge to strengthen capability across the team.
- 10+ years of hands-on Infrastructure and Security experience in a multi-site environment: retail, FMCG or logistics preferred
- Deep operational experience across Active Directory, Entra ID, Windows Server, and Microsoft 365
- Proven experience planning and executing on-prem to cloud migrations end-to‑end
- Strong multi-site networking fundamentals: Fortinet firewalls, SD‑WAN, VLANs, VPNs, Wi‑Fi
- Proven experience with enterprise storage and backup and recovery technologies, including SAN, Veeam, Rubrik or Zerto.
- Demonstrated experience in vulnerability management and penetration-test remediation.
- Hands-on experience across CrowdStrike, Mimecast, Netskope, and identity protection technologies
- Solid PowerShell scripting; IaC exposure (ARM/Bicep/Terraform) valued
- Relevant Azure or AWS certifications, such as AZ‑104, AZ‑500 or AWS Solutions Architect, are highly regarded.
#J-18808-Ljbffr
