Principal Cyber Security Ops Engineer

Principal Cyber Security Ops Engineer

Clerk Grade: 11/12

Annual Salary Range:$154231 - $178369 superannuation

Employment Type: Temporary (12 months) Full-time

Location: Sydney

About Us

The NSW Data Analytics Centre (DAC) leads a whole-of-government approach todata analytics connecting data insights and people to tackle the Statestoughest challenges. DACs Advanced Analytics Platform drives improved healthsafety and social outcomes for NSW citizens.

Wereseeking a Principal Cloud Security (SecOps) Engineer who is passionate aboutcyber security cloud security and SecOps automation to strengthen DACplatforms support ISO27001 compliance and help drive security initiativesacross an advanced cloud environment.

The Role

DAC isseeking a Principal Cloud Security (SecOps) Engineer to help drive cloudsecurity uplift program and elevate security posture across Azure Cloud SaaSplatforms and identity systems.

Role ishands-on security operations role responsible for the design implementationand remediation of cloud security controls across Microsoft Azure and key SaaSplatforms including Okta and Snowflake.

The rolewill work closely with Architecture Infrastructure and Security teams toidentify risks remediate vulnerabilities enhance security monitoring andensure Cloud and SaaS environments align with defined security standards.

KeyResponsibilities

AzureCloud Security

• Improve Azure security posture by addressing Microsoft Defender for Cloud Azure Policy and CSPM recommendations.
• Harden Azure subscriptions aligned to CIS benchmarks by implementing CIS controls.
• Implement Privileged Identity Management (PIM) and Conditional Access policies to enforce least-privilege at scale.
• Define security baselines and secure-by-default cloud operating model including security checklist for a product assessment or project implementation.

SaaSSecurity

• Support threat assessment of SaaS products like OKTA and Snowflake. Remediate gaps identified via OKTA Threat Insight and Snowflake Trust Centre Assessment
• Deploy and operationalise SSPM tooling (AppOmni) to continuously assess and remediate SaaS misconfigurations at scale.
• Monitor SaaS security configurations and remediate misconfigurations.

Identity& Access Hardening

• Support implementation of Zero trust identity strategy across Entra ID Okta and enforcing password less authentication across systems where applicable.
• Detect and remediate identity risks like privileged account sprawl stale permissions over-permissioned service accounts and credential misconfigurations.
• Establish PAM processes and just-in-time access workflows in OKTA and Entra ID.

VulnerabilityManagement

• Drive end-to-end vulnerability management including asset ingestion and scanning via Qualys SLA tracking etc
• Analyse vulnerability reports from Microsoft Defender Qualys. And address open OS and application-level vulnerabilities across Crown Jewels.
• Perform regular Cloud and SaaS vulnerability assessments.

SecurityMonitoring & Incident Response

• Author and continuously tune SIEM (MS Sentinel) rules across cloud identity and SaaS telemetry.
• Investigate security alerts and support incident response activities.
• Improve log collection visibility and monitoring across Azure and SaaS platforms.
• Support threat detection and continuous monitoring initiatives.

SecurityCompliance & Governance

• Support implementation of ISO 27001 Essential Eight CIS Controls and other relevant security frameworks.
• Participate in security risk assessments and threat modelling exercises.
• Assist with audit activities and evidence collection.

What WereLooking For

EssentialSkills:

• Deep hands-on experience with Microsoft Azure Security Services (Defender for Cloud Sentinel Entra ID Azure Policy Networking PIM). Experience securing Azure cloud environments.
• Hand-on experience implementing identity security Zero Trust and privileged access management. Experience implementing Conditional Access MFA PIM and PAM.
• Experience with vulnerability management platforms such as Qualys Microsoft Defender.
• Experience with SIEM security monitoring and incident response.
• Hands-on experience with Okta and Snowflake security.
• Knowledge of SaaS Security Posture Management (SSPM) solutions.
• Knowledge of cloud security frameworks including CIS Benchmarks ISO 27001 and Essential Eight.
• Strong analytical troubleshooting and communication skills.
• Relevant certifications such as Microsoft Azure Security Engineer (AZ-500) SC-200 SC-300 CISSP CCSP or equivalent are highly desirable.

Why JoinDAC

• Work on cutting-edge digital platforms that drive real-world outcomes.
• Collaborate with a team of experts in a supportive inclusive environment.
• Make an impact on state-of-the-art cloud security initiatives.

How to apply

If youre excited about this opportunity wed encourage you to apply. Please submit your current resume and a brief cover letter highlighting your relevant skills experience and what you can bring to the role.

Salary Grade 11/12 with the base salary for this role starting at $154231 base plus superannuation

Click Here to access the Role Description.

For enquiries relating to recruitment please contact Meg Rapley via

Visit the Capability Application Toolto prepare for the recruitment process by accessing practice application and interview questions based on the focus capabilities listed in the role description.

A talent pool may be created as part of this recruitment process and will be valid for up to 18 months. The talent pool may be used to fill future ongoing or temporary vacancies of the same or similar role.

Closing Date: Tuesday 1 September 2026 at 9:59am

Careers at Department of Customer Service
A career at the Department of Customer Service (DCS) gives you the opportunity to help improve government services and be part of reform that benefits people across NSW. We are focused on delivering excellent customer service digital transformation and regulatory reform. Come join us and influence the future of our great state.

Belong in our diverse and inclusive workplace
The strength of our workforce lies in its diversity and embracing difference while the key to our success is leveraging the contributions of employees with different backgrounds and perspectives.

You can view our full diversity and inclusion statement here.

We provide adjustments to the recruitment process for candidates including individuals with disability. If you require an adjustment during the recruitment process including alternate formats or have questions about the support available please contact Talent Operations onor .

For more information please visit

Information on some of the different types of disabilities

Information on adjustments available for the recruitment process

Required Experience:

Staff IC