Senior Network Security Engineer(SASE)

Job Description:

About the role

St Vincent’s Health Australia has committed, through Strategy 2030, to connecting care across its public hospitals, private hospitals, aged care and virtual care services, with half of all care delivered virtually or in people’s homes by 2030.

Secure, reliable access to clinical systems, from anywhere, is foundational to that. We’re undertaking a significant uplift of our secure access capability. We’re moving away from centralised data centre internet egress and on-premises VPN and web security, and towards a cloud-delivered SASE/SSE platform built on Zero Trust principles.

As our Senior Network Security Engineer, you’ll be SVHA’s senior technical authority for Secure Service Edge. You’ll set the architecture and lead it hands-on from PoC through design, build and rollout into operations. You will:

• •Lead PoCs, vendor evaluations across multiple vendor ecosystems (Cisco, Zscaler, Netskope, Palo Alto, Island).
• •Lead hands-on low level design, build and enterprise rollout of web security, ZTNA, CASB, DLP and browser isolation.
• •Advise D&T leadership and clinical stakeholders on Zero Trust and secure access.

Key responsibilities of the role

• •Lead architectural options analysis, cost modelling, risk assessment and technical decision-making for SSE business cases, vendor evaluations, PoCs and investment proposals.
• •Lead Low Level design, build, configuration, testing and enterprise rollout of: SWG and SSL/TLS inspectionCASB, ZTNA and DLPcloud firewall and RBI/enterprise browser capabilities
• •Design the integration of SSE with Cisco SD-WAN, Cisco Secure Firewall, identity and endpoint platforms, including the transition from centralised to regional and local internet breakout.
• •Review and assure low-level designs, configuration artefacts and integration patterns produced by vendors and delivery teams.
• •Ensure operational readiness through runbooks, policy libraries, monitoring and knowledge transfer to Cyber Operations and Infrastructure teams.
• •Ensure SSE designs meet healthcare, privacy and cyber obligations, including SOCI, ISO 27001, Essential Eight and OAIC requirements.
• •Provide senior escalation for complex or systemic secure access issues, and mentor engineers across cyber, cloud, identity and network teams.

Things that work for us

• •8–10+ years in senior technical roles across network security, cloud security or secure access, including 5+ years in an SSE-focused, security technical lead or cloud security architect role.
• •Extensive hands-on experience designing, implementing, operating and troubleshooting SASE/SSE capabilities across large, complex organisations, including: SWG and SSL/TLS inspectionCASB, ZTNA and DLPcloud firewall and RBI/enterprise browsers
• •Demonstrated experience leading technical design, PoC, build and enterprise rollout of SASE/SSE. This includes at least one large-scale Zscaler (ZIA/ZPA) or Netskope deployment, ideally across multiple vendor ecosystems.
• •Strong hands-on Cisco Secure Firewall (FTD/FMC) experience.
• •Expert routing skills (BGP, OSPF, PBR, ECMP, IPsec/GRE tunnel design), including integrating Cisco SD-WAN with cloud-delivered security.
• •Advanced, structured troubleshooting across the full SASE traffic path, from endpoint and identity through SD-WAN, firewall and SSE tunnels to cloud policy.
• •Deep understanding of Zero Trust, identity federation (Entra ID, SAML, SCIM) and agentless access for clinical, IoT and OT devices.
• •Proven ability to produce high-quality designs, standards and cost models, and to secure endorsement from architecture forums and cyber leadership.
• •Exceptional stakeholder engagement across executive, clinical and technical audiences, ideally in healthcare, critical infrastructure or the public sector.
• •Tertiary qualification in IT, Computer Science or Cyber Security.
• •A Cisco professional-level certification and at least one SSE vendor certification (Zscaler, Netskope or Palo Alto). CCIE Security or Enterprise Infrastructure is strongly preferred.

Things that work for you

• •Permanent, full-time role based in Melbourne with hybrid working (minimum two day a week on site)
• •Competitive salary packaging options
• •Discounted private health insurance
• •Employee Assistance Program for staff and their families
• •Access to the Fitness Passport (FP)

Why become part of St Vincent’s Health Australia

Because you’re like us, you believe in our vision that every person, whoever and wherever they are, is served with excellent and compassionate care, by a better and fairer health and aged care system. Better for all our people, who work tirelessly to provide the highest levels of care and quality of life for our patients and clients. And better support for the local communities we play an important role in and continue to support.

Reconciliation Action Plan

As part of our Commitment to Reconciliation and Closing the Gap in employment related outcomes, we encourage applications from Aboriginal and Torres Strait Islander Peoples. For further information, visit http://www.svha.org.au/about-us/reconciliation

We celebrate diversity & inclusion and are committed to equal employment opportunity for everyone.

Your employment is conditional upon the completion of all required pre-employment checks, including relevant immunisations.

Interested? Apply today and please note - we will be progressing applications throughout the advertising period.

Respectfully, no recruitment agencies.

Closing Date:

6 December 2026 11:59pm

Reconciliation Action Plan:

At St Vincent's we acknowledge the importance of creating a work environment that is welcoming, safe, equitable and inclusive for Aboriginal and/or Torres Strait Islander Employees. As part of our Commitment to Reconciliation and Closing the Gap in employment related outcomes, we encourage applications from Aboriginal and Torres Strait Islander Peoples.

For further information, visit https ://www.svha.org.au/about-us/reconciliation or get in contact at indigenouscareers@svha.org.au

View Reconciliation Action Plan

Code of Conduct:

View Code of Conduct