Infrastructure and Security Engineer

Victorian Tertiary Admission Centre Limited (VTAC)

www.vtac.edu.au

The Victorian Tertiary Admission Centre (VTAC) enables transparent and inclusive access to education by connecting learners with Victorian universities, TAFE institutes, and independent tertiary colleges. Each year, VTAC processes around 83,000 tertiary applications and offers, provides information services to applicants and schools, and manages VCE result scaling and ATAR calculations, including for International Baccalaureate and interstate students. VTAC’s IT Services department supports these functions through the maintenance and continuous improvement of systems, infrastructure, and data management.

About the role

The IT Infrastructure and Security Engineer is responsible for designing, building, and maintaining the security architecture of the organization’s IT systems. This role ensures the confidentiality, integrity, and availability of data and systems through robust security designs and controls. The ideal candidate will possess deep technical expertise, a strong understanding of risk management, and a strategic mindset to align security initiatives with business goals.

Knowledge and Skills

The successful candidate will possess all or most of the following requirements:

• 7+ years’ experience in cybersecurity operations, analysis, and incident response

• Strong experience securing multi-cloud environments (Azure and AWS, including EC2, VPC, IAM)

• Deep knowledge of Microsoft security ecosystem (Azure AD, Conditional Access, PIM, Defender, Sentinel) and email security (Mimecast preferred)

• Broad expertise in security technologies: SIEM, EDR, IAM, firewalls (incl. Palo Alto), web filtering, vulnerability and patch management

• Solid understanding of security frameworks and standards (NIST CSF, ISO 27001) and ITIL methodologies

• Strong technical knowledge across network, system, and cloud security, including protocols (TCP/IP, HTTP, DNS, SSL) and infrastructure (routers, switches)

• Experience in threat hunting, incident handling, red teaming, and vulnerability management

• Knowledge of application security, secure coding practices, and DevSecOps principles

• Strong understanding of common vulnerabilities, attack techniques, and mitigation strategies

• Excellent problem-solving, communication, and documentation skills, with the ability to influence and work across teams independently

Soft Skills

• Excellent communication skills with the ability to explain technical concepts to non-technical stakeholders.

• Strong problem-solving, analytical, and organizational skills.

• Proven leadership abilities and experience working across cross-functional teams.

• High level of integrity, professionalism, and attention to detail.

Education/Qualifications

• A Bachelor’s degree in Computer Science, Software Engineering, Information Systems or a related field; or

  an equivalent combination of relevant experience and/or education/training such as:

• Certified Information Systems Security Professional (CISSP)

• Certified Cloud Security Professional (CCSP)

• AWS/Azure Security Specialty

• SABSA, TOGAF, or other architecture frameworks

• GIAC certifications (e.g., GSEC, GDSA)

• Networking technologies – routers, switches, and routing protocols.

A valid Working with Children Check will be required.

Submit your application via SEEK including a resume and cover letter addressing the key responsibilities outlined in the position description. To access the full position description, please go to www.vtac.edu.au/employment

Direct any queries to [email protected]. Please note applications will not be accepted from this inbox.