Senior Azure Services Infrastructure Engineers

Role Description

This is a contract role for Senior Azure Services Infrastructure Engineers, with multiple positions available; with one of the Australian Federal Government Departments. The role is hybrid, located in Canberra, with some work from home acceptable. Day-to-day tasks include troubleshooting, managing and maintaining infrastructure, performing system administration, and ensuring network security and networking. The engineers will work to support and optimize cloud-based solutions and services on the Azure platform.

Technical Skills Required

• The Key Person/s will be Microsoft certified Azure professionals and will work predominantly as Modern Endpoint Specialists.
• Infrastructure Engineer are responsible to design, implement and manage Microsoft Intune solutions to support device management and security requirements.
• Accountable for accurate completion of work within timeframes and quality requirements, share own expertise with others and guide and mentor less experienced employees.
• Install, configure, secure, sustain and enhance Microsoft technologies enabling delivery of services to BSM utilising Commonwealth approved designs.
• Implement controls aligned with PSPF, ISM and relevant Australian Government Security Strategies and Enterprise Architectures.
• Manage policies on Windows Desktops & Laptops, including ACfB and Hardware Allowlisting.
• Packaging, updating, and managing applications via Intune.
• Configure and maintain Autopilot for automated on-boarding of Windows PCs to cloud tenancies.
• Work as part of a team to ensure ICT hardware configuration and type is appropriate for application support and functional operations.
• Has experience in change management and applies this to ensure the continuity of operations and business functions during installation or integration tasks.
• Build and sustain relationships, liaise with a range of stakeholders including other teams, peers and colleagues across Defence and other organisations.
• Transfer technical knowledge through preparation and maintenance of support processes and mentoring other staff members.
• Assist in the continuous improvement process by developing and enhancing procedures.
• Demonstrated 2-3 years' experience working in an Azure environment specifically Intune, noting certification is desirable.
• Experience with an Endpoint management solution such as Microsoft Endpoint Management\Intune.
• Strong knowledge and experience with Microsoft Cloud Security technologies, in particular a background configuring, administering and supporting Azure services.
• Demonstrated experience implementing controls of Microsoft Intune, device management, application management, patch management, and understanding and implementation of Microsoft Azure Platform as a Service (PaaS) features including Microsoft Entra ID.
• Familiarity and experience with infrastructure as-code development.
• Experience in networking technologies including Domain Name System (DNS), Transmission Control Protocol/Internet Protocol (TCP/IP), Secure Sockets Layer (SSL), Dynamic Host Configuration Protocol (DHCP) and Load Balancing.
• Excellent understanding of automation and automated configuration management and Continuous Integration/Continuous Delivery (CI/CD) pipelines.

Selection Criteria

The buyer has specified that each candidate must provide a response to each criterion.

Each response is limited to 3000 characters.

Essential Criteria

1. Demonstrated experience implementing controls of Microsoft Intune in support of Device

Management, Application Packaging and Patch Management.

1. Strong knowledge and experience with managing Windows SOEs, modern desktop management principals, and endpoint support via Azure services utilising both Microsoft Entra ID and Intune.

2. Demonstrated experience implementing automated SOE deployment via Microsoft MDT, MECM services or equivalent.

3. Strong background in automation using PowerShell to configure and manage Windows based operating systems

Desirable Criteria

1. Understanding of how to apply controls aligned with Protective Security Policy Framework (PSPF),Information Security Manual (ISM), and relevant Australian Government Security Strategies and Enterprise Architectures.

2. Experience with managed end user devices in high security environments (Microsoft

Endpoint Management/Intune).

1. Experience managing application allowlisting using enterprise tools such as Application Control for Business, Airlock or Carbon Black.

2. Excellent understanding of automation and automated configuration management and Continuous Integration/Continuous Delivery (CI/CD) pipelines.

Qualifications

• Troubleshooting skills for identifying and resolving issues
• Infrastructure management experience
• System Administration skills for maintaining and configuring systems
• Network Security skills to ensure system and data protection
• Azure cloud platform experience is highly beneficial
• Relevant certifications such as Microsoft Certified: Azure Solutions Architect Expert are a plus
• Excellent problem-solving and analytical skills
• Ability to work in a hybrid environment and manage work-from-home tasks efficiently

Must be able to obtain Negative Vetting Level 1