The Cyber Security Engineering Engineer/Designer

Job Description

• Skill Set :

  security

• Total Experience :

  10.00 to 12.00 Years

• No of Openings :

  1

• Job Post Date :

  14/10/2026

• Job Expiry Date :

  14/11/2026

• Domain :

  IT

• Location :

  SYDNEY [Australia]

• Job Reference No :

  4112901

Job Summary

Job Description:

The Cyber Security Engineering Engineer/Designer will be engaged to provide specialist solution design and delivery support to the Optus Cyber Security Engineering team. The resource will be responsible for preparing and maintaining security designs, raising and managing Firewall RITMs, Change Requests and Permits to Work (PTWs), coordinating approvals and implementation, and executing approved implementation activities across the project lifecycle.

Security Designer Role

The Security Designer will be responsible for the end-to-end design, governance, coordination, implementation support and troubleshooting of network security connectivity changes. Responsibilities include:

• Prepare and maintain Low Level Designs (LLDs) for network security solutions.
• Design, assess and implement Firewall, Proxy and VPN Gateway changes.
• Raise, track and manage Firewall RITMs and Change Requests.
• Develop communication matrices, traffic flows, port requirements and connectivity documentation.
• Liaise with platform owners, project teams, architects, Cyber Security and infrastructure stakeholders.
• Validate security requirements and ensure compliance with approved standards and policies.
• Implement approved Firewall, Proxy and VPN Gateway changes during approved maintenance windows.
• Provide troubleshooting and project delivery support for security connectivity issues.
• Maintain technical documentation, implementation plans and governance artefacts.
• Liaise with Platform Owners and the Cyber Security team to ensure Firewall RITMs are raised with complete information and approved in a timely manner.
• Review and optimise firewall policies to align with security standards, reduce rule complexity, remove redundant rules, and ensure ongoing compliance with governance and security requirements.
• Liaise with the Firewall Provisioning team to ensure approved RITMs are implemented within agreed timelines.
• Troubleshoot RITMs and associated connectivity issues where implementation does not operate as expected, and coordinate with the relevant teams to diagnose and resolve issues.

Responsibility includes the following activities:

• Solution Design - High Level Design (HLD) and Low Level Design (LLD)
• Firewall & VPN Configuration - Configuration, validation, and tuning
• Router & Switch Configuration - Layer 2/3 device configuration and verification
• Network Audit & Documentation - Review of existing network environment; updates to diagrams and associated documentation
• Lab Build & Testing - Build, test, and validate both existing and new solutions in a lab environment prior to production deployment
• Firewall Commissioning - Commissioning and baseline configuration of new firewall platforms
• Firewall Migration - Structured migration from legacy firewall platforms to replacement devices
• Consolidation Activities - Rationalisation and consolidation of existing network security infrastructure
• Decommissioning - Decommissioning of retired/legacy firewalls following successful migration
• Production Implementation - All production change activities to be executed during approved Night Maintenance Windows only
• Automation & Scripting - Prepare scripts to automate daily work and increase efficiency

Year of Exp: 5-10 Year

Fortinet & Checkpoint Certifications will be preferred

• Planning, Design and Migration
• Firewall Knowledge and Hands on, e.g. Fortinet and Checkpoint.
• Strong experience creating LLDs and technical design documentation.
• Has experience on FortiManager & Checkpoint Smart-1.
• Experience on VPN Deployment & Troubleshooting.
• Good understanding of dynamic routing protocols
• Router / Switch knowledge and Hands on, e.g. Cisco routers and switches. - Nice to have
• Proxy and VPN Gateway design and implementation experience.
• Confluence documentation tool knowledge.
• Change Management
• Experience working on large-scale infrastructure and transformation projects.
• Basic Systems experience on any Linux variants

Expectation from candidate:

• Solution Design (HLD & LLD)
• Low Level Design Documents (LLDs)
• Prepare Detailed Implementation Plan
• Firewall Communication Matrices.
• Firewall, Proxy & VPN Gateway Configurations
• FW policy optimisation & compliance
• Update Documentation/Diagrams
• Firewall RITM implementation Records
• Firewall Migrations
• Consolidation Activity