AddressApplication closing date: Tuesday, 28 May 2024 • 11:59pm, Canberra time (in Canberra)
Estimated start date: Monday, 01 July 2024
Location of work: SA
Working arrangements: The work is to be performed in Canberra or Adelaide, however Melbourne candidates will also be considered based on candidate’s suitability. Candidates will be required to attend Services Australia’s office in the nominated city a minimum of 2 days per week.
Length of contract: 12 Months
Contract extensions: 2 x 12 months
Security clearance: Must have Negative Vetting Level 1
Rates: $100 - $130 per hour (inc. super)
The Technical Engineering Expert, will lead, manage and provide engineering services and support to deliver the technical implementation of a suite of priority cyber security enhancements to support secure credential management.
The services include the engagement planning, technical design, implementation, and on-boarding of development and engineering teams to the services. The Technical Engineer should have significant experience in engineering, contemporary security and controls.
The successful candidate would lead, contribute, and collaborate with a multi-skilled team to deliver cutting edge security technologies to the agency, and would transition post project to manage the products in BAU.
Key duties may include, but are not limited to:
- Lead designing feature enhancements, implementation, and maintenance of a secure secrets management infrastructure using Hashicorp Vault.
- Perform a technical leadership role, operating potentially as a Product Owner in a multidisciplinary team.
- Provide broad technical support, design and engineering services for a project build, test and solution deployments.
- Define and enforce access control policies for secrets.
- Liaise on technical discussions with infrastructure, cyber security and development teams to address their requirements for a secure credential management solution.
- Drive innovation, continuous improvement and manage and lead change in securing development pipelines.
- Collaborate with a broad range of internal and external stakeholders to achieve project outcomes.
- Oversee and prepare technical documentation.
- Prepare reports to support senior executives through decision making Identify and implement new tools and features to strengthen the capability, efficiency, and security of the secrets management system.
- Mature the usage and practices around HashiCorp Vault within the agency.
Primary Technologies required for role include:
- Hashicorp Vault (Enterprise version).
- Linux (RHEL).
- Ansible Automation Platform (YAML).
- Gitlab (CI/CD pipelines).
- OpenStack/VMware (Networking Security Groups).
- LDAP
- JWT.
- Kubernetes.
- OIDC.
- IBM Security Verify Access (ISVA).
- RSA Authentication Manager.
- Terraform, packer, ansible, Linux nftables, filebeat & metricbeat.
Essential Criteria
- Demonstrated engineering experience leading deployment, configuration and maintenance of Hashicorp Vault (Enterprise version) in a government setting or a large enterprise environment.
Desirable Criteria
- Demonstrated experience providing technical leadership and working with technical stakeholders to achieve project success.
- Demonstrated experience working with technologies such as Red Hat Enterprise Linux (RHEL), infrastructure as code using Ansible Automation Platform and OpenStack and VMware, and Gitlab CI/CD pipelines.
- Demonstrated experience working with different Hashicorp Vault secrets engines and authentication methods required in a government setting or a large enterprise environment.
- Strong knowledge of secrets management concepts, cryptographic principles, security best practices and standards including Federal Government
information security policy (i.e. Information Security Manual, Protective Security Policy Framework) and the ACSCs Cyber Security principles and
guidelines.
