EUC Security Engineer / Designer-Sydney, New South Wales, Australia

Axiom Technologies is an Australia-based entity with a history of providing Managed IT solutions to medium- to large-scale enterprises globally. Please visit our website for more information about what we do at

We are looking for experienced Microsoft Security professionals to support enterprise security initiatives across Active Directory, Microsoft Entra ID, Windows Hello for Business and Microsoft Purview.

Key Responsibilities

• Assess and remediate Active Directory security and hardening gaps.
• Analyse AD, GPO, Kerberos, NTLM, LDAP, SMB and privileged access configurations.
• Perform security impact assessments and develop implementation/rollout plans.
• Assess and support Microsoft Entra ID and Windows Hello for Business enablement.
• Work on Conditional Access, Hybrid Identity, Entra Connect and device registration/join.
• Assess and enable Microsoft Purview capabilities such as DLP, Sensitivity Labels, Information Protection and Insider Risk.
• Perform log/telemetry analysis, pre-production testing and post-change validation.
• Prepare technical designs, test plans, implementation plans and validation reports.
• Coordinate with cybersecurity, infrastructure, application, EUC and managed service teams.
• Support controlled production implementation through the incumbent outsourcing partner.

Required Skills

• Strong expertise in Active Directory & Group Policy.
• Hands-on knowledge of Microsoft Entra ID / Hybrid Identity.
• Experience with Windows Hello for Business.
• Good knowledge of Microsoft Purview and Microsoft 365 Security.
• Strong understanding of security hardening, risk assessment, testing and deployment.
• Excellent documentation and stakeholder management skills.
• Experience working in large enterprise/governed environments with restricted administrative access.

Key Requirement

Candidates must have proven experience delivering similar Microsoft security/hardening projects, with the ability to take initiatives from discovery and assessment through design, testing, implementation support, and validation.

What next?

Job Category

Technical