Senior Infrastructure & Security Engineer

Harris Farm is mid-transformation, and this role is right in the middle of it.

We're migrating from on-premises to Azure, running one of the most ambitious AI programmes in Australian retail, and systematically hardening our security posture after our first enterprise-wide penetration test. We need someone who wants to be hands-on in all of it. Not managing from a distance, but in the console, at the store, on the phone to vendors, getting it done.

What You'll Do

• Own day-to-day infrastructure operations across servers, virtualisation (VMware/Hyper-V), Active Directory, Entra ID, Microsoft 365, DNS, DHCP, and core network services across all sites
• Drive the on-premises to Azure migration: assess workloads, plan waves, execute lift-and-shift and re-platform moves, and validate post-migration performance and security
• Lead systematic remediation of penetration testing findings: triage by severity, build plans, execute fixes, and verify closure
• Own the vulnerability management cycle: scan, prioritise, remediate, report residual risk weekly
• Triage security alerts from CrowdStrike Falcon, Mimecast, Netskope, and ADAuditPlus and integrate them into ITIL workflows
• Build and maintain runbooks and SOPs for every platform task, with the explicit goal of removing single-resource dependency
• Work with the CIO and AI Centre of Excellence to build security guardrails for HFM's AI programme: data residency, access controls, API security, and output governance
• Own backup and recovery operations via Veeam, monitor daily, and maintain DR readiness through regular failover testing
• Build Infrastructure as Code capability using ARM, Bicep, or Terraform
• Cross-train Operations Engineers: your knowledge should spread through the team, not stay with you

About You

We're looking for someone who is genuinely hungry, humble, and smart, and has the technical depth to match. Beyond that:

• 7+ years of hands-on infrastructure experience in a complex, multi-site environment: retail, FMCG, or logistics preferred
• Deep operational experience across Active Directory, Entra ID, Windows Server, and Microsoft 365
• Proven experience planning and executing on-prem to Azure migrations end-to-end
• Strong multi-site networking fundamentals: Fortinet firewalls, SD-WAN, VLANs, VPNs, Wi-Fi
• Demonstrable vulnerability management and pen test remediation experience
• Hands-on experience across CrowdStrike, Mimecast, Netskope, and identity protection tooling
• Solid PowerShell scripting; IaC exposure (ARM/Bicep/Terraform) valued
• Microsoft certifications valued: AZ-104, AZ-500, or MS-500
• Calm under pressure, clear communicator to non-technical audiences, and self-directed:you flag risks before they become incidents

Why Harris Farm

Harris Farm is a family-owned Australian fresh food business with more than 30 stores across NSW, ACT and QLD. Our technical and professional roles sit at the intersection of a business people genuinely love and the systems that make it scale. This one comes with real scope: a live cloud migration, a 60+ skill AI programme that needs security built into its foundations, and a technology function that's growing fast and needs you to grow with it.

Come as You Are, Grow as You Go: bring your expertise to a business that's building something worth being part of.

Ready to Apply?

Submit your application via the link below. We review applications as they come in, so don't wait.