EL1 Senior Technical Network Engineer

Australian Citizens residing in Australia only respond.

Job details

The Department of Finance is seeking one Senior Technical Network Engineer to provide specialist engineering, operational support and technical leadership for the Identity and Access Management Modernisation (IAMM) project. Duties will include:

• designing, configuring, maintaining and troubleshooting enterprise network infrastructure and services;
• providing senior expertise across LAN, WAN, routing, switching, wireless, remote access and network security technologies;
• leading diagnosis and resolution of complex network incidents, performance problems and service degradation;
• designing and implementing network segmentation and secure connectivity arrangements;
• planning and delivering network upgrades, configuration changes and technology refresh activities;
• providing technical assurance over network services delivered by managed service providers; and
• developing network designs, diagrams, implementation plans, configurations and operational documentation.

The IAMM Project will modernise Finance's identity and access management capabilities and transition from legacy Microsoft Identity Manager (MIM) and Active Directory Federation Services (AD FS) arrangements to a supported, cloud-ready architecture in which Microsoft Entra ID is Finance's primary identity directory and modern identity platform. SAP HR remains the authoritative source of workforce attributes. Downstream on-premises Active Directory accounts and services will be retained only where required for legacy dependencies, prior to MIM reaching end of extended support on 9 January 2029.

The project supports Finance's ICT and Digital Strategy, Cyber Security Strategy, 10-Year ICT Roadmap and Infrastructure Modernisation Program. The project will:

• Establish Microsoft Entra ID as Finance's primary identity directory and modern identity platform.
• Reduce reliance on MIM, AD FS and other legacy identity technologies.
• Strengthen cyber security through modern authentication, Conditional Access, phishing-resistant MFA, Identity Protection and identity governance capabilities.
• Integrate authoritative workforce identity sources and automate Joiner-Mover-Leaver processes.
• Migrate supported applications from AD FS to Microsoft Entra ID and Single Sign-On.
• Improve privileged access, access reviews, entitlement management, group governance, audit and reporting.
• Provide supported, sustainable operating arrangements, documentation, training and knowledge transfer.

Support the Secure Access Service Edge (SASE), Laptop Refresh and Finance's broader move towards cloud services and Zero Trust architecture.

The Canberra-based role will provide specialist network engineering support across Finance's enterprise infrastructure and contribute to IAMM and related modernisation initiatives where network connectivity, secure access, cloud integration, remote access and service resilience are critical. The engineer will address network dependencies, constraints, risks and operational requirements and provide technical assurance throughout design, implementation and transition.

Note: SASE is being delivered by a concurrent multi-year program and will modernise how users securely access Finance systems and services, moving from traditional network-based access controls to an identity-centric, Zero Trust model.

Key duties and responsibilities

The successful candidate (as Senior Technical Network Engineer) will undertake the following

duties and responsibilities

• Design, configure, implement, maintain and troubleshoot enterprise network infrastructure and associated services.
• Provide senior technical practical expertise across LAN, WAN, routing, switching, wireless networking, remote access and network security technologies.
• Manage and support network connectivity between Finance infrastructure, cloud environments, business systems and external services.
• Lead diagnosis and resolution of complex network incidents, performance problems, application connectivity and service degradation issues.
• Design and implement network segmentation and segregation to support security and risk management requirements.
• Support enterprise firewall policies, secure connectivity, network access and related security services across multiple platforms, including Azure Firewall, Cisco Firepower, DDoS protection solutions and Web Application Firewalls.
• Assess network vulnerabilities, technology lifecycle risks and configuration issues and implement/troubleshoot appropriate remediation.
• Undertake network capacity, availability, performance and resilience analysis.
• Plan and implement network upgrades, configuration changes and technology refresh activities.
• Provide specialist network engineering input into infrastructure, cloud, cyber security and ICT modernisation initiatives that integrate enterprise networks with cloud and hybrid infrastructure – including Azure ExpressRoute, virtual networks and Application Gateway.
• Develop and maintain network designs, diagrams, configurations, implementation plans, operational procedures and other technical documentation.
• Support network monitoring, alerting and proactive identification of service issues.
• Provide technical advice and assurance for network services delivered by external ICT service providers.
• Work with technology vendors and managed service providers to investigate and resolve complex technical issues.
• Support disaster recovery, business continuity and infrastructure resilience activities.
• Identify opportunities to automate, standardise, simplify and improve network operations through such methods as infrastructure-as-code or configuration automation.
• Provide technical guidance and knowledge transfer to Finance ICT personnel.

The candidate should address the expected outcomes of maintaining secure and reliable network operations, resolving complex incidents, remediating security and lifecycle risks, delivering agreed upgrades, improving documentation and monitoring, providing technical oversight of external providers and transferring knowledge to Finance personnel.