Principal Cyber Security Operations Engineer

Job description

• NSW Government
• Up to $1100 + super per day
• Contract until June 2026

The Role

Our NSW Government client is looking for a Principal Cyber Security Operations Engineer / DevSecOps Engineer to lead the uplift of cloud security across platforms, processes, and tooling. They operate entirely in the cloud, with workloads spanning multiple SaaS providers including Okta and Snowflake, and a strong focus on Microsoft Azure. You will play a pivotal role in strengthening the security posture of the Azure cloud platform.

This hands-on role combines technical implementation, solution design, and close collaboration with security teams. You will be responsible for identifying and remediating cloud security risks, managing ISO 27001 treatments, and driving security automation initiatives.

Key Responsibilities

• Azure Security Remediation: Lead remediation activities identified through Azure Security Assessments to harden cloud security posture and improve the operational health of Azure platforms.
• SIEM Implementation: Support the implementation and operation of Microsoft Sentinel SIEM capabilities.
• ISO 27001 Treatments: Implement technical controls to address ISO 27001 risks and compliance gaps, strengthening overall cloud security.
• Security Tooling & Automation: Design, build, and manage automated security and compliance remediation workflows, including:
  • Identity and Access Management (IAM) hardening using Okta and Entra ID
  • Supporting rollout of vulnerability management tools such as Qualys
• BCP & DR: Support the development and maintenance of business continuity, disaster recovery, and recovery plans across cloud platforms.
• Cross-Team Collaboration: Partner with Security and Architecture teams to embed security best practices and contribute to the design and implementation of security policies.
• Reporting & Communication: Produce and present security reports, dashboards, and key updates to senior stakeholders.

Required Skills

• Extensive experience in Azure Cloud Security, including Identity and Access Management (IAM) using Microsoft Entra ID, SIEM with Microsoft Sentinel, CIS Benchmarking, and implementation of cloud security best practices.
• Strong background in Cloud Cyber Security, with hands-on experience deploying and managing cloud-based security tools such as Azure security controls, Okta FastPass, and password management solutions.
• Proven Cloud DevSecOps Engineering experience, including cloud security, infrastructure as code (IaC), and secure CI/CD practices.
• Demonstrated capability in designing, implementing, and maintaining security policies, procedures, metrics, documentation, and reporting.
• Security certifications preferred, particularly Microsoft Azure Administrator, Azure Security Engineer Associate, ISO 27001, or equivalent.
• Strong knowledge of ISO 27001, security frameworks, and governance standards.
• Experience working across multiple teams and stakeholders to provide security guidance, uplift maturity, and embed security best practices.
• Excellent communication skills, with the ability to translate complex security concepts for both technical and non-technical stakeholders.

How to Apply
If the above sounds like you, please hit APPLY for a confidential discussion