Senior Security Platform Engineer – Data & Edge Security

About the role

At Optus we connect millions of Australians daily and protect those connections. We are seeking a Senior Security Platform Engineer to define configuration standards, enforcement policies, and platform engineering decisions for our proxy, endpoint, and email threat‑prevention systems.

Key responsibilities

• Own and define configuration standards across network filtering, endpoint protection, and email security solutions, setting the bar for delivery teams.
• Serve as platform engineering liaison at the Traffic Governance Board, translating governance decisions into detailed engineering requirements and change specifications.
• Define DLP enforcement requirements at the proxy and email layers, specifying how sensitivity labels flow from data‑protection governance into operational controls.
• Own the full MDM/MAM policy framework across Windows, macOS, iOS, and Android, including compliance baselines, enrolment standards, and conditional‑access requirements.
• Produce production‑grade runbooks, configuration standards, and platform documentation for operational and governance audiences, maintaining audit‑ready records to meet SOCI obligations.

Required profile

• 5+ years of hands‑on security platform engineering experience with direct ownership across gateway, endpoint protection, and email filtering security areas.
• Proven track record of defining configuration standards and translating governance decisions into engineering requirements, focusing on policy ownership rather than administration.
• Deep proxy expertise: URL filtering, SSL inspection, CASB integration, and DLP enforcement on the proxy layer, including sensitivity‑label flow into enforcement policy.
• Experience owning EDR configuration standards for Windows and macOS, as well as MDM/MAM policies and DMARC enforcement across a multi‑domain estate, preferably in a SOCI‑obligated or regulated environment.
• Ability to operate credibly at governance forums, communicate clearly across technical and executive audiences, and maintain audit‑ready configuration records.

Required skills

• Proxy configuration (URL filtering, SSL inspection, CASB integration)
• DLP enforcement
• Endpoint Detection and Response (EDR) configuration for Windows and macOS
• MDM/MAM policy management for Windows, macOS, iOS, and Android
• Email security and DMARC enforcement

What we offer

• Competitive remuneration plus employee discounts, $80 monthly credit and 25% off Optus products.
• Hybrid working model – three days in the office, two days remote.
• Vibrant campus with cafés, gym, on‑site childcare and other amenities.
• Generous leave policies, including up to 16 weeks paid parental leave and additional ‘Connected’ days.
• Access to wellbeing support services, employee networks and diversity initiatives.