Senior Endpoint Platform Engineer

Location:
Brisbane

Remuneration/Benefit:
Negotiable

About the role:
We're looking for a highly skilled and strategic Senior Endpoint Platform Engineer to take full ownership of endpoint and end-user security solutions across our enterprise. This is a hands-on, technically deep role where you'll be working closely with our Desktop, Server, and Cloud teams to ensure secure, scalable, and compliant endpoint environments.

You won't just follow instructions—you'll lead with vision. We need someone who sees the big picture, thrives on collaboration, and brings a proactive mindset to protecting our people, systems, and data.

In this role, you will:

• Design, implement, and manage Secure Endpoint Solutions (e.g. Crowdstrike, Cylance, Defender, Intune, Cisco Secure Workload, CIS Benchmarks).
• Lead system administration and maintenance of secure endpoint tools and platforms.
• Own Mobile Device Management (MDM) platforms and deliver high-performing, secure services.
• Manage vulnerability scanning and reporting tools and provide actionable insights to system owners and GRC teams.
• Develop and enforce robust security and vulnerability management protocols.
• Implement Microsoft email and endpoint security configurations across the organisation.
• Deliver platform services aligned with agreed SLAs and internal ITSM processes.
• Build technology roadmaps to drive the maturity of endpoint security capabilities.
• Create and maintain Disaster Recovery plans and lead testing efforts.
• Maintain clear documentation for system architectures, assets, and procedures.
• Provide training and guidance on secure endpoint practices across the organisation.
• Work cross-functionally to deliver secure, reliable, and compliant endpoint solutions.
• Support incident response activities and maintain incident readiness tools.
• Participate in post-incident reviews and continuously improve endpoint security posture.
• Participate in an on-call rotation as part of the team roster.

About you:

• Bachelor's degree in IT, Software Engineering, Networking, or related field (mandatory).
• Industry certifications (e.g., CASP+, GSEC, Microsoft Azure Administrator, Microsoft 365 Endpoint Admin) are highly regarded.
• 7+ years of experience designing and managing enterprise-level endpoint security.
• Deep hands-on experience with
  Crowdstrike
  and
  Microsoft Defender for Endpoint
  (mandatory).
• Advanced knowledge of
  Microsoft Exchange/Exchange Online security
  , Windows/Linux/Unix, and Azure administration (mandatory).
• Scripting skills using
  PowerShell
  and/or
  Python
  (mandatory).
• Proven ability to implement
  Zero Trust principles
  at the endpoint level.
• Strong communicator with a collaborative, solutions-focused approach.
• Familiarity with
  MITRE ATT&CK
  ,
  D3FEND
  , or
  deception technologies
  (preferred but not essential).

What we offer you:

At Aurizon, we support the development and growth of our employees. With a national portfolio of operations, we offer long-term and exciting career opportunities.

Some of our benefits include:

• Development and growth opportunities.
• Access to mentoring and development programs.
• Discounts on selected health insurance funds, personal travel, gyms, vehicles and retail brands.
• Parental leave program and super booster.

About Aurizon.

Aurizon is Australia's largest rail freight operator and a top 100 ASX company.Each year, we deliver more than 250 million tonnes of Australian commodities right across the country. Aurizon is crucial to the Australian economy, connecting miners, primary producers and industry with international and domestic markets.

Look to Aurizon for a diverse and collaborative culture.

At Aurizon, we are proud of our diverse, collaborative, creative and high-performance culture. We celebrate the contribution of every employee and provide opportunities for career development in a dynamic, caring, and inclusive work environment.

To learn about us and our company values, please visit