Network and Technical Change Lead - Manager / Senior Manager

At Scyne, we are public purpose sector specialists who support governments and their agencies, and not-for-profit organisations, to deliver services to Australians, helping to build more resilient, equitable, secure and prosperous communities. We are guided by our values of Stronger Together, Amplify Impact, Build Trusted Relationships, Value Every Person, Think Beyond Limits, and Defined by Ethics.

Our purpose-driven professionals provide clients with access to the skills, capabilities and expertise to support the delivery of government agendas and public purpose projects, with specialist teams across three national practices: 

• Transformation 
• Risk, Programs and Cyber 
• Commercial, Financial and Infrastructure 

The context:

Our people work from offices, client sites and home, and they rely on fast, secure access to Scyne systems, cloud services and SaaS applications. This role looks after the Palo Alto Networks platform that makes that possible, and the change process that keeps the whole environment stable.

As the Network and Technical Change Lead, you will own Scyne's network and secure access architecture, built on Palo Alto Networks, and you will run technical change across Scyne's technology environment, including chairing the Change Advisory Board (CAB). You will make sure network, cloud and security changes are well designed, safely deployed and keep Scyne secure.

You will decide whether a change is ready to go ahead. You will chair CAB, hold our managed service provider (MSP) and internal teams to a high standard of planning, testing and rollback, and keep improving how change is delivered. You will bring practical experience of modern cloud deployment practices, such as infrastructure as code and automated pipelines, so that change is faster and safer, and you will make sure security is considered in every change.

 

In this role, you will:

• Own the design, configuration and lifecycle of Scyne's Palo Alto Networks environment, including Prisma Access (SASE), GlobalProtect, next-generation firewalls, and management through Strata Cloud Manager or Panorama.
• Manage security policy across the Palo Alto stack: rule review and clean-up, identity-based access, URL filtering, threat prevention, SSL decryption, and logging to security monitoring tools.
• Maintain secure, reliable connectivity for users, offices and cloud environments, including remote access, site connectivity, DNS, and network integration with Azure, AWS and GCP.
• Run Scyne's Change Advisory Board: set the agenda, chair the meeting, assess risk and impact, and approve, defer or reject changes.
• Own the technical change management process across network, cloud, security and applications, including change types, lead times, emergency changes, freeze periods, post-implementation reviews and reporting on change success.
• Review MSP and internal change requests for quality, including implementation steps, testing, rollback and communication plans, and send back those that are not ready.
• Bring cloud deployment practices into change: infrastructure as code, pipeline-based deployments in GitHub Actions or Azure DevOps, environment promotion and automated testing, and define where standard, pre-approved changes can safely be used.
• Make sure every change is assessed for security impact, and work with the cyber security team on vulnerability remediation, patching windows and urgent security changes.
• Track vulnerabilities and software versions across the Palo Alto stack, and plan and lead upgrades.
• Lead network and change-related incident and problem management with the MSP, and drive lasting fixes.
• Produce and maintain network diagrams, standards, configuration records, change templates and runbooks.
• Report on change and network performance to the Director, Head of Architecture and Cloud, and recommend improvements.

 

Ideally, you'll have some of the following:

• 10+ years' experience in network engineering or network security, including significant hands-on work with Palo Alto Networks technologies.
• Practical experience designing and operating Prisma Access (SASE), GlobalProtect and Palo Alto firewalls; experience with Prisma SD-WAN, Prisma Access Browser or Prisma Cloud is valued.
• Proven experience running a Change Advisory Board and owning change management, applying ITIL change, incident and problem practices.
• Experience with cloud deployment practices, including infrastructure as code (such as Terraform), CI/CD pipelines in GitHub Actions or Azure DevOps, and cloud networking in Azure, AWS or GCP.
• Strong network security knowledge, including zero trust, segmentation, secure remote access, and familiarity with the ASD Essential Eight and the Information Security Manual (ISM).
• Strong grasp of networking fundamentals: routing, switching, VPN, DNS and load balancing.
• Experience directing and governing a managed service provider.
• Experience leading technical teams and influencing senior stakeholders.
• Clear written communication, with the ability to produce diagrams, standards and change records that others can follow.
• Palo Alto Networks certifications are highly desirable, such as PCNSE or a Prisma Access or SASE specialisation; ITIL Foundation or higher is valued.
• A tertiary qualification in information technology, computer science, engineering or a related discipline is desirable.

 

• Market leading Parental Leave: Allows either carer to take 26 weeks of leave, flexibly, until a child is two years of age. A six-month minimum service requirement for new starters applies. We also make full superannuation contributions for up to 12 months (including unpaid parental leave). 
• Flex working: Our people have the autonomy to choose where and when they work so they can integrate their professional and personal lives, finding the right balance that fuels their growth, wellbeing, engagement and productivity. If it works for them, their teams, and their clients, it works for us. 
• Additional leave: a 5th week of paid leave to support rest, wellbeing, and inclusion during our annual summer shutdown also Birthday leave, First Nations Cultural Leave, Floating Public Holidays, Leave+ (purchased leave up to 12 weeks), Study Leave, Volunteering Leave, and more! 
• Smart Device reimbursement: Working flexibly means accessing the information you need on the go. That’s why we help pay for your smartphone or tablet, claiming up to $60 a month towards your bill. 
• Wellness and Lifestyle benefits: We’ll give you $295 a year to spend on items or activities that support your wellness, and up to $205 a year to support your balanced lifestyle. 
• Acacia: Our EAP provider, whose holistic suite of services promote wellbeing and proactively provide protection and support when it matters most for our people and their families.

Scyne Advisory: Our Commitment to Diversity, Inclusion, and Impact

We champion a culture of diversity, equity, and inclusion, recognising that collective intelligence and varied perspectives are crucial for delivering exceptional outcomes for Australia's public sector. We actively encourage applications from individuals within marginalised and historically underrepresented communities. Please advise us if you require any adjustments during the application process.

We are deeply passionate about improving outcomes for First Peoples, collaborating with government and community sectors on programs focused on First Nations clients, consumers, and communities. We highly value the profound knowledge, insights, capabilities, strength, resilience, and cultural competence of First Peoples.

Our recruitment process is fair and inclusive, seeking a skilled and diverse workforce reflective of the communities we serve. We consider ability, performance, potential, and alignment with our values, valuing unique experiences and contributions. Background checks and, if required, valid Commonwealth security clearances are part of our process.

For recruitment partners, please note that candidate submissions from search firms and recruiters are only accepted in alignment with a pre-existing, signed agreement for a specific position. Unsolicited resumes will not incur financial obligation.