The Role
We are seeking an APS6 Cyber Security Engineer to work with our engineering teams specialising in Identity, Credential, and Access Management (ICAM), security design and implementation across various platforms.
Key responsibilities for this position include:
* Set technical direction and system design uplift for Microsoft Entra ID, on-premises Active Directory operations and non-operable processes on behalf of enterprise projects.
* Provide technical advice on pre-standing and acquired ICAM assets to ensure ‘safety by design’, and work with cross-functional teams to ensure technical standards align with internal policy and external security frameworks.
* Develop and design:
o Automated provisioning/de-provisioning workflows and access review processes including leading integration connectivity between ICAM platforms and enterprise applications – i.e. ServiceNow, AWS and M365.
o Configurations of SAML, OIDC and OAuth for single sign-on and multi-factor authentication.
o Conditional access policies, including passwordless authentication, FIDO2 integration and hardening of the security permitter.
* Act as the technical point of escalation for complex identity support and audit functions, creating and verifying ICAM technical and capability recommendations for implementation.
* Produce solution design artefacts, current/future state baselines and SOPs for enterprise ICAM solutions.
* Use logging and monitoring tools and dashboards to identify risk, patterns and effectiveness requirements across enterprise ICAM solutions.
* Support in the management of public-key infrastructure and certificate lifecycle.
* Translate complex engineering concerns for technical and non-technical decision makers.
This role is eligible for an additional remuneration benefit known in Defence as a Building Defence Capability Payment (BDCP). This enables Defence to provide a premium, in addition to the base salary otherwise payable under the Defence Enterprise Collective Agreement (DECA), for positions in occupational disciplines/classifications that are critical to Defence capability. For further information, please contact the contact officer.
About our Team
You will work in the Engineering Branch as part of a team of ICT professionals delivering complex projects across key Digital domains in both the Military and Enterprise Systems Divisions within Defence Digital Group (DDG).Defence Digital Group is the capability manager for digital capability development, empowering and modernising the Defence enterprise. The branch provides engineering expertise and resources to delivery and enhancement teams across enterprise projects.
This role is situated within the Cyber Engineering Directorate and intended to provide technical expertise in a matrixed construct, as teams and individuals within the branch’s directorates are embedded into projects as needed. We commit to providing additional professionalisation for the right candidates so you can continue to grow and develop your career. We will also provide mentorship and coaching to ensure you reach your potential.
Our Ideal Candidate
Our ideal candidate will have the following experience and skills:
* Degree in ICT; or TAFE/VET qualifications in ICT; and/or 3+ years of relevant knowledge and experience.
* Knowledge of Microsoft Entra ID (Azure AD), Oracle IAM, SAP Identity Management (IDM).
* Experience in and/or knowledge of, designing security solutions involving Data Loss Prevention (DLP), Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), and threat management.
* Ability to integrate identity and access management solutions with enterprise systems and cloud services for consistent management across all platforms.
* Experience with and/or knowledge of, design and deployment of Zero Trust Architecture for identity and credentials management, ensuring a security model that eliminates implicit trust and continuously verifies users and devices.
* Experience in ensuring secure access, identity governance, and protection against security threats while implementing advanced security measures to safeguard organisational assets.
Application Closing Date: 11:30pm Monday 4 May 2026.
For further information please review the job information pack, reference DDG/02105/26 on https://defencecareers.nga.net.au/?jati=37CC3168-5B1D-3126-F4E3-ECD828E3BA01