Firewall / Secure Access Engineer

About the role

Downer's Group Technology team is looking for an experienced Firewall / Secure Access Engineer to join its Cloud, Access & Security team. Reporting to the Team Lead, you will shape and secure the network environment, leading firewall platforms, secure access technologies, network segmentation, remote access, secure internet egress, partner connectivity and security policy governance. You will work with Cyber Security, Architecture, Cloud, Identity and Service Management teams to modernise network security through automation, standardisation and DevOps-aligned engineering.

Key responsibilities

• Lead the design, engineering and lifecycle management of enterprise firewall and secure access platforms.
• Drive network segmentation, secure remote access, DMZ, secure internet egress and partner connectivity initiatives.
• Act as the senior escalation point for complex firewall, access control and network security incidents.
• Champion automation, policy standardisation and configuration consistency across security platforms.
• Contribute to transformation programs on network modernisation, cloud adoption and security uplift.
• Partner with Cyber Security teams on Zero Trust, Essential Eight and vulnerability management.
• Manage relationships with vendors, managed service providers and specialist security partners.
• Champion AIOps, automation, Infrastructure as Code and DevOps practices, and provide technical assurance and guidance.

Required profile

• Tertiary qualification in Computer Science, Engineering or a related discipline.
• 10+ years' experience in enterprise firewall engineering, network security and secure access environments.
• Strong experience designing, deploying and supporting next-generation firewalls, and with firewall policy governance and segmentation enforcement.
• Experience with VPNs, remote access, partner connectivity and secure internet access services.
• Experience in enterprise transformation, security uplift and modernisation, and in highly governed environments.
• Desirable: SASE, Zscaler or Cisco Secure Access experience, ITIL qualifications, Algosec or other firewall policy automation exposure, and AIOps knowledge.

Required skills

• Firewall certifications such as Fortinet, Check Point or Cisco, or equivalent.
• Strong troubleshooting across firewalls, network security controls, inter-zone traffic flows and access management.
• DevOps, Infrastructure as Code and security automation (desirable).

What we offer

• Professional development programs and access to professional memberships and industry networks.
• Flexible work arrangements and parental leave.
• Employee Assistance Program and diversity and inclusion programs.
• Corporate benefits including discounts on car hire, hotels, insurance, retail stores and gyms.