Cloud Security Specialist – Azure & Fabric

About the role

Randstad is working with a Queensland Government Department to recruit a Cloud Security Specialist on an initial 3-month contract with potential of extension. The role is based in Brisbane CBD with WFH flexibility and focuses on designing, implementing and assuring cloud, data and identity security controls across an evolving Enterprise Data Platform, using a Zero Trust approach on Microsoft Azure and Microsoft Fabric.

Key responsibilities

• Define, maintain and implement the end-to-end cloud and data security architecture, target-state roadmap, reusable patterns and guardrails across Azure, Microsoft Fabric and analytics services.
• Design, govern and mature the role-based access control (RBAC) model, user access matrices and Privileged Identity Management (PIM) mapped to Microsoft Entra groups and workspaces.
• Implement fine-grained data protection controls such as row-level and column-level security, masking, encryption, key management and data loss prevention across data warehouses and lakehouses.
• Set up secure delivery practices for CI/CD pipelines, Infrastructure as Code, deployment identities, branch protection and credential lifecycle management.
• Lead the implementation, validation and remediation of controls from threat risk assessments, audits and penetration tests, maintain the central Security Controls Matrix and integrate with SIEM services.

Required profile

• Extensive experience in cloud security, data security, IAM or security architecture, with proven success securing enterprise Microsoft Azure and Microsoft Fabric environments.
• Brisbane-based candidate with working rights; candidates must be based in Brisbane.
• Relevant qualifications desired.

Required skills

• Microsoft Entra ID, Azure RBAC, Privileged Identity Management (PIM) and Conditional Access.
• Row-level and column-level security, masking, entitlement models across SQL, Power BI semantic models, lakehouses and analytics platforms.
• DevSecOps: securing CI/CD pipelines, release governance, secret and key rotation, Infrastructure as Code.
• Ability to turn security assessments and threat models into control matrices, remediation plans and architecture documentation; CISSP, CCSP or Microsoft Cybersecurity Architect certification highly regarded.

What we offer

• Pay of $1,093.76 per day plus super ($1,225.01 per day including super).
• Udemy license for learning and professional development.
• Exclusive discounts across platforms and discounts on private health funds.
• Three payruns per week.