The Law Society of NSW Hiring for Cloud & Security Engineer Job at Sydney, Australia Full Time

• Highly supportive team and CIO
• Permanent, full-time
• Martin Place, Sydney CBD

Accountabilities

The Cloud & Security Engineer is accountable for the cloud and networking architecture used by the Law Society’s technical services. The role proactively ensures that adoption aligns to the planned architecture and is continually reviewed for cost improvements and security risks.

The role has proactive focus, ensuring security is maintained to a high standard to protect the business. You will be involved in the delivery of proactive operational projects that are key to the continual improvement in security, high availability, and a resilient environment.

You will contribute to the development and execution of a strategic vision for infrastructure, security and operational resilience with key areas of focus being risk reduction, impact reduction & security / threat management.

Responsibilities include

Cloud and Infrastructure

• Continually review the adoption of hosted services. Focusing on delivering a cloud first approach through the adoption of SaaS and PaaS services.
• Review design for performance, capacity and availability to ensure correct fit of resources at a just in time model (not over or under capacity)
• Segmentation of technical services for security but also for a cost analysis and recharge
• To define and review the architecture as cloud services develop and released
• Applicable hardware is covered under maintenance agreements to protect against damage or loss (e.g. UPS, A/C, servers, firewalls etc)
• To ensure relevant IT services are able to be recovered / restored in the event a disaster is declared and Disaster Recovery procedures are invoked

Security Management

• To develop an ongoing focus on security and ensure the Society and its members remain protected to the highest level
• Responsible for security design, implementation and continual review of the security architecture
• Network management design, architecture and controls – e.g. firewalls, WAF, switches, segmentation of traffic for security and breach limitation
• Application review from a technical implementation as well as a user interface
• Continually look for improvements to security to reduce risk of data loss and improvement to the application stability
• Vulnerability Management – Patching and configuration issues are reviewed and resolved.
• Privileged Account Management – Password rotation, admin account design and architecture. Limited account administration roles outside of use of the tool
• Jump box design, maintenance and monitoring for 3rd party support
• SIEM alert review and improvement
• Backup and recovery management are conducted maintained and aligned to policy
• Multi-Factor and user account review. Define policy and processes for user account control and review. Ensure adherence and review for future risks.

Requirements

This role would suit someone with

• Tertiary degree in Computing Science or similar
• 5+ years as a 3rd level support engineer
• 5+ years’ experience in supporting 500+ workstations using Microsoft Operating Systems
• 5+ years’ experience with Microsoft Active Directory
• Good working knowledge of Virtualization, Server Load Balancing and Clustering
• Understanding of emerging technologies and IT Security products
• 2+ years’ experience with Project Management. Proven experience in management of IT Infrastructure projects
• 3+ years’ experience with a formal change management corporate environment
• 3+ years’ experience and strong understanding of disaster recovery and backup technology

This position requires full working rights in Australia.

About us

The Law Society of New South Wales works with, and for the legal profession. We hold responsibility as a co-regulator and are Australia’s largest membership body for Solicitors. We are committed to building and maintaining a respectful and inclusive workplace, appointing the best person for the role and supporting diversity.