{"id":3385476,"url":"https://alion.io/job/downer-group-firewall-secure-access-engineer-2","title":"Firewall/ Secure Access Engineer","company":{"id":2169700,"name":"Downer Group","domain":"downergroup.co.nz","url":"https://alion.io/company/downergroup","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":89,"open_postings":11,"ghost_share":0,"stale_share":0.455,"repost_share":0,"time_to_fill_p50_days":32,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Melbourne, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":95000,"max_usd":221000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1702},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AIOps","optional":false},{"name":"Zero Trust","optional":false},{"name":"ITIL","optional":true},{"name":"Zscaler","optional":true}],"status":"live","first_seen_at":"2026-10-28T05:04:43Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-10-30T00:41:49Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"We have an exciting opportunity for an experienced Firewall / Secure Access Engineer to join Downer's Group Technology team.\nThis is a senior engineering role suited to a highly capable network security professional who thrives in complex enterprise environments and is passionate about delivering secure, resilient and well-governed connectivity services across a large and diverse technology landscape.\nReporting to the Cloud, Access & Security Team Lead, you will play a critical role in shaping and securing Downer's network environment, providing technical leadership across firewall platforms, secure access technologies, network segmentation, remote access, secure internet egress, partner connectivity and security policy governance.\nWorking closely with Cyber Security, Architecture, Cloud, Identity and Service Management teams, you will help modernise and strengthen our network security capability through automation, standardisation and DevOps-aligned engineering practices.\nOperating within a product-led DevOps model, you will contribute across the full lifecycle including strategy, architecture, engineering, deployment, optimisation and operational governance, ensuring security controls remain scalable, supportable and aligned to business and risk objectives.\nAbout the Role\nIn this role you will:\nLead the design, engineering and lifecycle management of enterprise firewall and secure access platforms.\nDrive network segmentation, secure remote access, DMZ, secure internet egress and partner connectivity initiatives.\nAct as the senior escalation point for complex firewall, access control and network security incidents.\nChampion automation, policy standardisation and configuration consistency across security platforms.\nContribute to strategic transformation programs focused on network modernisation, cloud adoption and security uplift.\nPartner with Cyber Security teams to support Zero Trust, Essential Eight and vulnerability management initiatives.\nManage relationships with technology vendors, managed service providers and specialist network security partners.\nChampion AIOps capability, automation, Infrastructure as Code (IaC) and DevOps-aligned engineering practices.\nProvide technical assurance, guidance and support across projects, operational services and major technology changes.\nContribute to a culture of engineering excellence, accountability and continuous improvement.\nThis is a highly visible role where you will influence strategic security decisions while ensuring critical enterprise network services remain secure, resilient and operationally effective.\nOur Ideal Candidate\nYou are a technically strong and commercially aware network security professional who enjoys solving complex challenges and influencing outcomes across multiple technology teams.\nYou bring a balance of strategic thinking, deep technical expertise and operational leadership, with the ability to communicate complex security concepts clearly to both technical and non-technical stakeholders.\nWhat You Will Bring\nTertiary qualifications in Computer Science, Engineering or a related discipline.\nFirewall certifications such as Fortinet, Check Point, Cisco or equivalent.\n10+ years' experience in enterprise firewall engineering, network security and secure access environments.\nStrong experience designing, deploying and supporting next-generation firewall platforms.\nDemonstrated experience in firewall policy governance, policy optimisation and segmentation enforcement.\nExperience managing VPNs, remote access solutions, partner connectivity and secure internet access services.\nStrong troubleshooting skills across firewalls, network security controls, inter-zone traffic flows and access management.\nExperience supporting enterprise transformation, security uplift and technology modernisation initiatives.\nStrong stakeholder engagement skills across cyber security, cloud, infrastructure and business teams.\nExperience working within operationally critical and highly governed environments.\nDesirable\nExperience with SASE, Zscaler, Cisco Secure Access or similar secure access platforms.\nExperience with DevOps, Infrastructure as Code and security automation practices.\nITIL or Service Management qualifications.\nExperience with Algosec or firewall policy automation platforms.\nExposure to AIOps, intelligent monitoring and AI-assisted support capabilities.\nExperience working in highly distributed enterprise environments with strong security and compliance requirements.\nBenefits Of Working with Downer\nWork with an ASX listed company, working with market leaders.\nGrow your career with us, we are passionate about giving our people opportunities to grow through personal and professional development and continuous learning: Professional development programs Access to professional memberships and industry networks\n\nBe part of a team that cares, we foster a work environment built on support that is flexible around our employee’s wellbeing needs: Flexible work arrangements Parental leave\nEmployee Assistance Program\nPrograms promoting diversity and inclusion\n\nA range of Corporate Benefits, including: Discounted services (car hires, hotels, insurance, retail stores, gyms) \n\nWhy Downer?\nAs a trusted name in infrastructure, transport, facilities management, and construction, Downer is committed to delivering projects that create a lasting, positive legacy.\nWe're committed to building a team that reflects the diverse communities we serve, and we welcome people of all ages, genders, sexual orientations, cultures, abilities, and lived experiences. We especially encourage applications from those whose voices have traditionally been underrepresented in our industry, including women, Aboriginal and Torres Strait Islander Peoples, Māori and Pasifika Peoples, veterans, people with disability, and neurodivergent individuals.\nEven if your experience doesn't align perfectly with this role, we'd still like to hear from you. If it feels like the right fit, apply - potential counts, and so do you.\nAs a WORK180 Endorsed Employer, we support flexibility that works for your life, inclusive leadership that values your voice, and equitable access to opportunity so you can do your best work and bring your whole self to it.","description_format":"text","description_chars":6257,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Flexible schedule","Parental leave","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Public Transport","Network Security","Construction"],"lifecycle":[{"event":"open","at":"2026-10-28T07:14:47Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":32,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/downer-group-firewall-secure-access-engineer-2","json_url":"https://alion.io/job/downer-group-firewall-secure-access-engineer-2.json","meta":{"generated_at":"2026-10-30T02:48:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3628,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2169700},"rest":"https://alion.io/mcp/rest/get_company?id=2169700"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdowner-group-firewall-secure-access-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdowner-group-firewall-secure-access-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdowner-group-firewall-secure-access-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/downer-group-firewall-secure-access-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdowner-group-firewall-secure-access-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3385476}},{"tool":"search_jobs","arguments":{"company":"downergroup.co.nz","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3385476},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}