About the role
We are seeking an experienced Cyber Security Engineer to support and lead cyber security uplift initiatives across PKI, certificate lifecycle management, encryption, identity and access management, privileged access security and infrastructure security.
The initial focus of the role will be on the delivery of a PKI and Certificate Lifecycle Program, with responsibilities spanning certificate discovery, PKI solution design, certificate governance, lifecycle automation, monitoring, integration with non-domain joined devices and cryptographic standards uplift.
Following completion of the PKI program, the role will transition into broader IAM and Infrastructure Security initiatives, providing the opportunity to work across a diverse range of enterprise security capabilities.
Key responsibilities
- Design, implement and support enterprise PKI solutions.
- Conduct certificate discovery and establish an enterprise certificate inventory.
- Implement certificate governance, lifecycle management and automation.
- Design and implement encryption controls supporting data at rest and data in transit.
- Implement RBAC and least-privilege security controls.
- Support IAM, IGA, PAM and PIM capabilities.
- Design and implement PAW and Jump Host solutions.
- Support certificate integration across Active Directory, Entra ID, Intune, enterprise applications and non-domain joined devices.
- Develop monitoring, alerting, standards, procedures and technical documentation.
- Contribute to broader cyber security and infrastructure security uplift initiatives.
Highly desirable criteria
- Experience with Venafi, Keyfactor, AppViewX or DigiCert Trust Lifecycle Manager.
- Experience with SCEP, NDES, Intune Certificate Connector or Microsoft Cloud PKI.
- Experience with CyberArk, Delinea, Saviynt or Okta.
- Knowledge of ISO 27001 and NIST Cyber Security Framework.
Desirable criteria
- Experience working within large and complex enterprise environments.
- Experience across Microsoft security technologies and enterprise infrastructure platforms.
- Experience developing security standards, procedures and technical documentation.
- Experience supporting security uplift and transformation programs.
Skills and experience
- Demonstrated experience designing, implementing and supporting enterprise PKI solutions.
- Strong experience managing certificate lifecycle activities, including discovery, issuance, renewal, revocation, monitoring and reporting.
- Experience with Microsoft AD CS or equivalent PKI platforms.
- Experience implementing certificate-based authentication and certificate deployment solutions.
- Experience integrating certificates with Active Directory, Entra ID, Intune, enterprise applications, cloud services and non-domain joined devices.
- Experience implementing certificate lifecycle automation and governance processes.
- Strong understanding of Certificate Authorities, certificate templates, CRL, OCSP, trust chains, key management and cryptographic standards.
- Experience implementing encryption controls for data at rest and data in transit.
- Experience implementing RBAC and least-privilege security models.
- Experience with IGA, access certification and access review processes.
- Experience with PAM, PIM and privileged access security controls.
- Experience implementing PAW and Jump Host solutions.
- Strong experience working across Entra ID, Active Directory, Windows Server and enterprise infrastructure platforms.
- Experience with security hardening and infrastructure security practices.
- Knowledge of Entra ID, Microsoft Defender, BitLocker and related Microsoft security technologies.
- Understanding of ASD Essential Eight, IS18 and Zero Trust principles.
Benefits
- Opportunity to work on a significant enterprise cyber security uplift program.
- Work across PKI, IAM, PAM, encryption and infrastructure security.
- Exposure to a broad range of enterprise security technologies and platforms.
- Opportunity to contribute to both technical delivery and security governance.
- Progression into broader IAM and Infrastructure Security initiatives following completion of the initial PKI program.
Contact details
For a confidential chat, please contact Shilpa on 0438 027 836. We would be more than happy to provide you with additional information and assist you with the application process.
