Security Engineer

Security Engineer — Contract | Canberra | NV2+ Cleared

Opes is looking for experienced contractors to support the delivery of a complex project in Canberra. We are seeking professionals with demonstrated expertise, a strong delivery mindset, and the ability to operate effectively in secure, high-assurance environments.

This project offers the opportunity to work alongside Opes’ highly capable technical and consulting professionals on a challenging engagement that requires sound judgement, collaboration, and a commitment to delivery excellence. We are looking for individuals who can add value from day one, take ownership of outcomes, and contribute to the successful delivery of critical capabilities.

About the role

As a Security Engineer, you’ll build and configure the security solutions within a cleared client environment — identity and access controls, certificate services, SIEM, vulnerability assessment, endpoint protection and network access control. Working to approved build documentation and security standards, you’ll onboard log sources, integrate security tooling with the wider environment, and carry defined workstreams through configuration, validation and remediation.

What you’ll be doing

• Building and configuring PKI and Active Directory Certificate Services (ADCS), including HSM integration
• Configuring identity federation via ADFS / IdP and supporting IAM services
• Building and tuning Splunk SIEM and Zabbix, and onboarding log sources
• Configuring Cisco ISE for network access control
• Configuring vulnerability management (Tenable) and endpoint / content protection (ClamAV, OPSWAT MetaDefender)
• Building and maintaining syslog server infrastructure
• Applying system hardening in alignment with ISM, PSPF and DSPF
• Troubleshooting faults, maintaining build documentation and following change control

What we’re looking for

• Hands-on build experience across PKI / ADCS, including certificate services and HSM integration
• Strong identity capability across ADFS / IdP and IAM services
• Splunk SIEM experience — build, tuning and log-source onboarding
• Experience with Cisco ISE, Tenable, ClamAV and OPSWAT MetaDefender
• System hardening experience, including WDAC / App Control
• Working knowledge of ISM, PSPF and DSPF
• The ability to work unsupervised and deliver defined workstreams to a consistent standard

Clearance

You must hold a current Australian Government security clearance at NV2 or above. Opes is not sponsoring new clearances for these positions. Only applicants who currently hold the required clearance will be considered.