Senior Senior Technical Network Engineer

DEPARTMENT OF FINANCE WILL NOT CONSIDER OR INVITE ADDITIONAL SELLERS TO THIS RFQ. UNSOLICITED EMAILS AND REQUESTS WILL NOT BE ANSWERED. The Department of Finance is seeking one Senior Technical Network Engineer to provide specialist engineering, operational support and technical leadership for the Identity and Access Management Modernisation (IAMM) project. Duties will include: designing, configuring, maintaining and troubleshooting enterprise network infrastructure and services; providing senior expertise across LAN, WAN, routing, switching, wireless, remote access and network security technologies; leading diagnosis and resolution of complex network incidents, performance problems and service degradation; designing and implementing network segmentation and secure connectivity arrangements; planning and delivering network upgrades, configuration changes and technology refresh activities; providing technical assurance over network services delivered by managed service providers; and developing network designs, diagrams, implementation plans, configurations and operational documentation. The IAMM Project will modernise Finance’s identity and access management capabilities and transition from legacy Microsoft Identity Manager (MIM) and Active Directory Federation Services (AD FS) arrangements to a supported, cloud-ready architecture in which Microsoft Entra ID is Finance’s primary identity directory and modern identity platform. SAP HR remains the authoritative source of workforce attributes. Downstream on-premises Active Directory accounts and services will be retained only where required for legacy dependencies, prior to MIM reaching end of extended support on 9 January 2029. The project supports Finance’s ICT and Digital Strategy, Cyber Security Strategy, 10-Year ICT Roadmap and Infrastructure Modernisation Program. The project will: Establish Microsoft Entra ID as Finance’s primary identity directory and modern identity platform. Reduce reliance on MIM, AD FS and other legacy identity technologies. Strengthen cyber security through modern authentication, Conditional Access, phishing-resistant MFA, Identity Protection and identity governance capabilities. Integrate authoritative workforce identity sources and automate Joiner-Mover-Leaver processes. Migrate supported applications from AD FS to Microsoft Entra ID and Single Sign-On. Improve privileged access, access reviews, entitlement management, group governance, audit and reporting. Provide supported, sustainable operating arrangements, documentation, training and knowledge transfer. Support the Secure Access Service Edge (SASE), Laptop Refresh and Finance’s broader move towards cloud services and Zero Trust architecture. The Canberra-based role will provide specialist network engineering support across Finance’s enterprise infrastructure and contribute to IAMM and related modernisation initiatives where network connectivity, secure access, cloud integration, remote access and service resilience are critical. The engineer will address network dependencies, constraints, risks and operational requirements and provide technical assurance throughout design, implementation and transition. Note: SASE is being delivered by a concurrent multi-year program and will modernise how users securely access Finance systems and services, moving from traditional network-based access controls to an identity-centric, Zero Trust model. Key duties and responsibilities The successful candidate (as Senior Technical Network Engineer) will undertake the following duties and responsibilities: Design, configure, implement, maintain and troubleshoot enterprise network infrastructure and associated services. Provide senior technical practical expertise across LAN, WAN, routing, switching, wireless networking, remote access and network security technologies. Manage and support network connectivity between Finance infrastructure, cloud environments, business systems and external services. Lead diagnosis and resolution of complex network incidents, performance problems, application connectivity and service degradation issues. Design and implement network segmentation and segregation to support security and risk management requirements. Support enterprise firewall policies, secure connectivity, network access and related security services across multiple platforms, including Azure Firewall, Cisco Firepower, DDoS protection solutions and Web Application Firewalls. Assess network vulnerabilities, technology lifecycle risks and configuration issues and implement/troubleshoot appropriate remediation. Undertake network capacity, availability, performance and resilience analysis. Plan and implement network upgrades, configuration changes and technology refresh activities. Provide specialist network engineering input into infrastructure, cloud, cyber security and ICT modernisation initiatives that integrate enterprise networks with cloud and hybrid infrastructure – including Azure ExpressRoute, virtual networks and Application Gateway. Develop and maintain network designs, diagrams, configurations, implementation plans, operational procedures and other technical documentation. Support network monitoring, alerting and proactive identification of service issues. Provide technical advice and assurance for network services delivered by external ICT service providers. Work with technology vendors and managed service providers to investigate and resolve complex technical issues. Support disaster recovery, business continuity and infrastructure resilience activities. Identify opportunities to automate, standardise, simplify and improve network operations through such methods as infrastructure-as-code or configuration automation. Provide technical guidance and knowledge transfer to Finance ICT personnel. The candidate should address the expected outcomes of maintaining secure and reliable network operations, resolving complex incidents, remediating security and lifecycle risks, delivering agreed upgrades, improving documentation and monitoring, providing technical oversight of external providers and transferring knowledge to Finance personnel. Criteria The buyer has specified that each candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters. Essential criteria 1. Labour Hire Workers and Supplier Personnel MUST include in their response to the RFQ any potential conflicts of interest which may arise in performing duties during the term of the Contract. This includes (but is not limited to): owning interests and/or ongoing employment with ICT businesses who deliver services to the Commonwealth; have vested interests in ICT technologies; have l relationships with Buyer personnel involved in the Contract’s scope. Response to this question does not count towards a candidate’s word/page limit. Desirable criteria 1. All Candidates with respect to their Seller will be evaluated against the evaluation criterion listed in this “Desirable Criteria” section. The evaluation criteria are unweighted. Evaluation Criterion 1: The extent to which a candidate & seller demonstrates an understanding and appreciation of the Requirements (Role description + Key duties and responsibilities + Technical Skills). 2. Evaluation Criterion 2: The extent to which a candidate & seller demonstrates the capacity, capability, and experience to fulfil the Requirements (Role description + Key duties and responsibilities + Technical Skills) to a high standard and within any specified timeframes. • The Buyer will consider potential onboarding delays and impacts to timeframes if candidates does not possess a current security clearance. • The Buyer will consider non-compliance with details of the Working Arrangement. 3. Evaluation Criterion 3: The risk associated with a candidate and/or seller. Including (but not limited to) those identified during interviews; referee reports; non-compliance with contract terms and conditions; financial viability risks; conflicts of interest; and any other due diligence checks considered by the Buyer 4. Evaluation Criterion 4: The pricing and whole-of-life costs associated with a candidate and/or seller. Opportunity summary Sellers can submit Up to 3 candidates Number of sellers invited Between 5 and 10 Number of candidates submitted Fewer than 10 Send us feedback About Accessibility Privacy Terms of use Disclaimer and copyright An initiative of the Digital Transformation Agency The Australian Government acknowledges the Traditional Owners of Country throughout Australia and acknowledges their continuing connection to land, waters and community. We pay our respects to the people, the cultures and the Elders past and present. © Commonwealth of Australia