Senior System Engineer

Senior Systems Engineer

• Location: Canberra (Onsite)
• Contract: 12 Months (with extensions)
• Clearance Requirement: Must be an Australian Citizen

Overview

We are seeking an experienced Senior Systems Engineer to join our Infrastructure Services team in Canberra. This is a 12-month onsite contract with a high likelihood of extension. The successful candidate must be an Australian Citizen and will be responsible for the ongoing support, operations, and enhancement of enterprise Windows Server environments, ensuring secure, stable, and efficient infrastructure services for the department.

Key Duties & Responsibilities

• Provide day-to-day operational support and BAU activities within the Infrastructure Services team.
• Manage, maintain, and support Windows Server environments including troubleshooting, incident resolution, and escalation for critical issues.
• Support and administer enterprise services such as Active Directory, Entra ID, DNS, PKI, ADFS, File and Print services, DFS, and Group Policy (including AGPM).
• Monitor, patch, and maintain systems using Microsoft System Centre products (SCOM, SCCM/MECM) and Intune.
• Collaborate with Cyber Security teams to ensure compliance with security tools and practices, including application whitelisting, host-based firewalls, vulnerability management, and device control.
• Assist with incident response, root cause analysis, and provide input into system improvements and preventative measures.
• Contribute to technical documentation, including SOPs, design documentation, and knowledge articles.

Essential Criteria

• Windows Server Expertise – Detailed understanding and hands-on experience with Active Directory, Entra ID, DNS, PKI, ADFS, File & Print, DFS, and GPO with Advanced Group Policy Management (AGPM).
• Systems Monitoring & Patching – Experience with Microsoft System Centre products (SCOM, SCCM/MECM) and Intune.
• Cyber Security Knowledge – Understanding of application whitelisting, host-based firewalls, vulnerability scanners, and device control.

Desirable Criteria

• Experience managing Azure Infrastructure as a Service (IaaS) environments including template deployment and administration.
• Knowledge of Cyber Security requirements, including ISM, Essential 8, and ACSC hardening guidelines.
• Strong background in writing clear and detailed technical documentation (SOPs, design documents, operational procedures).
• Experience implementing and managing Privileged Access Management (PAM) solutions such as CyberArk, including vaulting credentials, session monitoring, and integration with enterprise authentication and identity systems.