" \u003cdiv class=\"ja-job-details\"\u003e \u003ch2 class=\"title\"\u003ePrincipal Consultant, ARMIS - 12 month Fixed Term Contract\u003c/h2\u003e \u003cdiv class=\"meta\"\u003e \u003cul class=\"classifications\"\u003e \u003cli data-id=\"19926\"\u003e IT \u0026amp; Telecomms \u003c/li\u003e \u003cli data-id=\"19927\"\u003e IT Security \u003c/li\u003e \u003cli data-id=\"19928\"\u003e Sydney \u003c/li\u003e \u003cli data-id=\"19929\"\u003e Temp \u003c/li\u003e \u003c/ul\u003e \u003cp class=\"date-posted\"\u003e 13/10/2026 \u003c/p\u003e \u003c/div\u003e \u003cdiv class=\"description\"\u003e This is aimed for a senior security engineer manage and deploy Armis end-end. Assumption is that they can gain Armis specific knowledge once onboarded to the vendor learning platform (eg. integrations section below).\u003cbr\u003e \u0026nbsp;\u003cbr\u003e Feel free to alter and trim as required.\u003cbr\u003e \u0026nbsp;\u003cbr\u003e \u003cstrong\u003eInfrastructure \u0026amp; Platform Requirements\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eReview and validate Armis architecture against enterprise security and operational requirements.\u003c/li\u003e \u003cli\u003eProvision and configure Armis appliances (cloud, virtual, or physical) according to vendor best practices.\u003c/li\u003e \u003cli\u003eEnsure adequate compute, storage, and network capacity for device discovery and telemetry processing.\u003c/li\u003e \u003cli\u003eValidate high availability, redundancy, and disaster recovery requirements.\u003c/li\u003e \u003cli\u003eFacilitate recovery procedures for Armis platform components (collectors and brokers).\u003c/li\u003e \u003cli\u003eCoordinate infrastructure dependencies across server, network, cloud, and security teams.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eNetwork Requirements\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eConfigure SPAN, TAP, or packet mirror sessions for required network visibility.\u003c/li\u003e \u003cli\u003eEnsure routing, firewall, and load-balancing requirements are documented and implemented.\u003c/li\u003e \u003cli\u003eValidate network segmentation and connectivity between Armis collectors and management components.\u003c/li\u003e \u003cli\u003eConfigure required DNS, NTP, and certificate services.\u003c/li\u003e \u003cli\u003eAssess bandwidth consumption and telemetry flow impacts.\u003c/li\u003e \u003cli\u003eVerify access to all required device management and monitoring networks.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eSecurity Requirements\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eImplement RBAC and least-privilege access controls.\u003c/li\u003e \u003cli\u003eIntegrate with enterprise identity providers (Azure AD, Entra ID, Okta, Active Directory, etc.).\u003c/li\u003e \u003cli\u003eConfigure MFA and privileged access management for administrative accounts.\u003c/li\u003e \u003cli\u003eValidate data encryption in transit and at rest.\u003c/li\u003e \u003cli\u003eReview compliance requirements (ISO 27001, Essential Eight, NIST, SOC, CIS benchmarks).\u003c/li\u003e \u003cli\u003eEstablish audit logging and log retention policies.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eSystem Integrations\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eIntegrate with SIEM platforms (Microsoft Sentinel, Splunk, QRadar, etc.).\u003c/li\u003e \u003cli\u003eIntegrate with vulnerability management platforms (Tenable, Qualys, Rapid7).\u003c/li\u003e \u003cli\u003eConfigure ITSM integration (ServiceNow, Jira, etc.) for incident and asset workflows.\u003c/li\u003e \u003cli\u003eIntegrate with NAC platforms (Cisco ISE, Aruba ClearPass, FortiNAC).\u003c/li\u003e \u003cli\u003eConfigure EDR/XDR integrations where required (Defender for Endpoint, CrowdStrike, SentinelOne).\u003c/li\u003e \u003cli\u003eValidate API connectivity and authentication methods.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eAsset Discovery \u0026amp; Visibility\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eDefine device discovery scope across IT, OT, IoT, medical, and cloud environments.\u003c/li\u003e \u003cli\u003eValidate coverage of all network segments and critical assets.\u003c/li\u003e \u003cli\u003eEstablish asset classification and ownership models.\u003c/li\u003e \u003cli\u003eConfigure device tagging, grouping, and business context mapping.\u003c/li\u003e \u003cli\u003eValidate unmanaged and unknown device identification capabilities.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eCloud \u0026amp; Hybrid Requirements\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eConfigure cloud connectors (Azure, AWS, GCP) as required.\u003c/li\u003e \u003cli\u003eValidate permissions and service accounts for cloud inventory collection.\u003c/li\u003e \u003cli\u003eEnsure secure communication between cloud workloads and Armis.\u003c/li\u003e \u003cli\u003eImplement governance for multi-cloud environments.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eOperational Readiness\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eDevelop deployment runbooks and standard operating procedures.\u003c/li\u003e \u003cli\u003eDefine monitoring, alerting, and escalation processes with Armis.\u003c/li\u003e \u003cli\u003eEstablish platform health monitoring and capacity management.\u003c/li\u003e \u003cli\u003eConduct user acceptance testing and operational validation.\u003c/li\u003e \u003cli\u003eDeliver knowledge transfer to security operations and infrastructure teams.\u003c/li\u003e \u003cli\u003eCreate support and maintenance procedures.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eProject \u0026amp; Governance Requirements\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003ePerform technical design review and architecture approval.\u003c/li\u003e \u003cli\u003eComplete security risk assessment and change management requirements.\u003c/li\u003e \u003cli\u003eDefine success criteria and measurable deployment outcomes.\u003c/li\u003e \u003cli\u003eProduce as-built documentation and configuration baselines.\u003c/li\u003e \u003cli\u003eEstablish ongoing ownership and support model.\u003c/li\u003e \u003cli\u003ePlan phased rollout and rollback procedures.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eSenior Engineer Deliverables\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003ePresales consulting with clients.\u003c/li\u003e \u003cli\u003eSolution architecture and deployment design documentation.\u003c/li\u003e \u003cli\u003eNetwork and integration design diagrams.\u003c/li\u003e \u003cli\u003eSecurity configuration standards.\u003c/li\u003e \u003cli\u003eTranslate overall risk assessment to key stakeholders.\u003c/li\u003e \u003cli\u003eConduct and review gap assessments with key stakeholders.\u003c/li\u003e \u003cli\u003eOperational runbooks and support procedures.\u003c/li\u003e \u003cli\u003eTest plans and validation results.\u003c/li\u003e \u003cli\u003eHandover documentation and knowledge transfer sessions.\u003c/li\u003e \u003cli\u003eProduction readiness sign-off.\u003c/li\u003e \u003c/ul\u003e \u0026nbsp; \u003c/div\u003e \u003cdiv class=\"apply\"\u003e \u003ca class=\"back-link\" href=\"#\" title=\"Back to search results\"\u003eBack to search results\u003c/a\u003e \u003cinput type=\"button\" class=\"ja-button\" data-job-id=\"930229\" value=\"Apply Now\" title=\"Apply Now\" /\u003e \u003c/div\u003e \u003c/div\u003e "