The Cloud Engineer services will design and configure the Murry-Darling Basin Authority’s (MDBA) cloud identity and access environment in Azure, enforcing role-based access controls (RBAC), multi-factor authentication (MFA), and conditional access to meet Essential Eight Maturity Level 1.

The services focus on privileged account governance, phish-resistant MFA, conditional access redesign, and supporting the Privileged Operating Environment in Azure.

The chosen vendor must work with MDBA staff, other vendors and service providers and work within the MDBA’s ICT architecture, policies and guidelines. The engagement is expected to require approximately 480 hours over 6 months, with the option to extend twice for 3 months each. The vendor will allocate appropriately skilled resources to deliver the outcomes and deliverables defined in this scope.

Estimated start date: Tuesday, 23 September 2025

Initial contract duration: 6 months

Extension term: 3 months

Number of extensions: 2

Location of work: ACT

Working arrangements: Hybrid