Systems Engineer (Infrastructure & Security Architecture)

Countersight

Role Type

  • Permanent
  • Full-time
  • Associate

Who we are

Countersight is a specialist cybersecurity company delivering security research, capability development and consulting services to clients within government and across the private sector. We are independent, Australian, and Canberra based but with the flexibility to operate Australia wide.

Our team works on complex cyber operations and engineering challenges across infrastructure, security architecture, detection and response, with a strong focus on delivering practical, high-impact outcomes for our clients.

The Role

Role Title: Systems Engineer (Infrastructure & Security Architecture)

Location: Canberra, ACT

Hours: Full-time

Salary: $100,000 – $180,000 (plus super) based on experience

Our Systems Engineers are responsible for designing, building, securing, and operating Countersight’s internal and client-facing infrastructure across a hybrid environment spanning on-premises systems and multiple cloud platforms.

This role sits at the intersection of infrastructure engineering and security engineering, with a strong emphasis on building secure, scalable, and maintainable systems. You will work across Linux and Windows environments, public cloud platforms (Azure, AWS, GCP), and supporting networking and identity systems to ensure our infrastructure is resilient, performant, and aligned with best practice security controls.

The role requires a hands-on engineer who can both operate production systems and design improvements, with a focus on automation, simplification, and continuous uplift.

Typical responsibilities include

– Designing, deploying and maintaining hybrid infrastructure across on-premises and cloud environments

– Administering and hardening Linux and Windows systems in line with security best practices

– Managing and improving cloud environments across Azure, AWS and GCP

– Designing and maintaining identity and access management solutions (e.g. Entra ID, Auth0, SSO, RBAC)

– Implementing and maintaining secure network architectures including VPNs, remote access, segmentation and hybrid connectivity

– Implementing and maintaining infrastructure-as-code and automation (e.g. Terraform, Ansible, scripting)

– Monitoring system health, performance, and availability

– Designing and implementing security controls including system hardening, patching, and logging

– Supporting integration with security tooling including SIEM and monitoring platforms

– Reviewing environments to improve security, cost, and operational efficiency

– Documenting systems, architectures, and procedures

What we are looking for

We are looking for experienced systems and infrastructure engineers who are comfortable working across core infrastructure, cloud platforms, and security controls, and who enjoy solving complex engineering problems.

Must-have

– Experience in systems or infrastructure engineering roles

– Hands-on experience with Linux and Windows Server environments

– Strong experience with at least one cloud platform (Azure, AWS, or GCP)

– Experience with networking, hybrid environments, and cloud connectivity

– Strong understanding of identity and access management (Entra ID, SSO, RBAC)

– Experience implementing security controls (hardening, patching, logging)

– Experience with infrastructure-as-code (Ansible & Terraform preferred)

– Scripting capability (Python, Bash, or PowerShell)

– Strong troubleshooting and problem-solving skills

– Strong communication and stakeholder engagement skills

Nice-to-have

– Multi-cloud experience (Azure, AWS, GCP)

– Microsoft 365 security capabilities (Defender, Conditional Access, Purview)

– Familiarity with SIEM/logging pipelines

– Exposure to detection engineering or SOC environments

– Familiarity with Australian Government frameworks (ISM, PSPF, Essential Eight)

– Experience with Zero Trust architectures

– Experience designing secure cloud landing zones

Why work for Countersight

As a small company, we prioritise supporting our team and fostering a positive, flexible, and enjoyable work culture.

Our work allows us to contribute to meaningful security outcomes while building advanced capability across infrastructure and security engineering.

We enjoy solving complex problems, improving systems, and building things properly, and we think you will too.

Eligibility

– Be an Australian Citizen

– Be eligible to obtain and maintain an Australian Government security clearance (NV1 minimum preferred)

– Satisfy pre-employment screening

Application Procedure

Please apply via https://employmenthero.com/jobs/position/countersight-proprietary-limited-systems-engineer-infrastructure-security-architecture-x9la3/ with a current resume and covering letter highlighting your relevant experience and any publicly available examples of your work.

For enquiries, contact ***email_hidden***.