{"id":17864,"date":"2026-10-28T15:18:30","date_gmt":"2026-10-28T04:18:30","guid":{"rendered":"https:\/\/www.thedrivegroup.com.au\/?p=17864"},"modified":"2026-10-28T15:23:24","modified_gmt":"2026-10-28T04:23:24","slug":"blog-infrastructure-to-cyber-security","status":"publish","type":"post","link":"https:\/\/www.thedrivegroup.com.au\/blog-infrastructure-to-cyber-security\/","title":{"rendered":"How Do I Move From Infrastructure Into Cyber Security?"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">You don&#8217;t need to start again. For most Infrastructure Engineers, the move into cyber security is a sideways step rather than a leap: you take the part of infrastructure you already know best, whether that&#8217;s identity, cloud or networking, and lean into the security side of it. A Systems Engineer working heavily with Entra ID and Conditional Access might move into Identity and Access Management (IAM), a Cloud Engineer into Cloud Security, and a Network Engineer into Network Security.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Hayley Bee, our cyber security specialist and Principal Consultant, regularly talks with Infrastructure, Network and Cloud Engineers about making this move. And the encouraging part is that your infrastructure background isn&#8217;t something you need to leave behind. In fact, it&#8217;s one of the things Cyber Security Managers ask us for most.<\/span><\/p>\n<p><b>What&#8217;s the cyber security market like in Australia right now?<\/b><\/p>\n<p><span style=\"font-weight: 400;\">It&#8217;s a tricky market to break into cold, but a good one for people who bring real technical experience. In our <a href=\"https:\/\/www.thedrivegroup.com.au\/market-report\/\">Market Report &amp; Salary Guide 2026\/27<\/a>, we rated cyber security hiring as very hard, with employers most selective about technical depth and specialist capability. Budgets are mostly maintaining current headcount, and as AI takes on more lower-level tasks, there are fewer junior roles to go around.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">That&#8217;s exactly why the infrastructure route works. You&#8217;re arriving with the hands-on experience employers are prioritising. The same report found that on the infrastructure side, cloud and security skills are already commanding a clear pay premium, so moving in this direction tends to pay off even before your job title changes.<\/span><\/p>\n<p><b>Which area of cyber security is closest to the work you already do?<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Start by looking at what you spend most of your week on. The most natural moves we see look like this:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Systems Engineer \u2192 IAM.<\/b><span style=\"font-weight: 400;\"> If you&#8217;re deep in Entra ID, Conditional Access and privileged access, you&#8217;re already doing a lot of what an IAM specialist does.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Cloud Engineer \u2192 Cloud Security.<\/b><span style=\"font-weight: 400;\"> You know how the environment is built, which is half the job of securing it.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Network Engineer \u2192 Network Security.<\/b><span style=\"font-weight: 400;\"> Firewalls, segmentation and traffic flows are a natural next step.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Infrastructure Engineer \u2192 Security Engineering.<\/b><span style=\"font-weight: 400;\"> If you keep getting pulled into security projects, that&#8217;s often the start of the transition.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">As Hayley puts it: &#8220;Cyber security doesn&#8217;t always have to be a dramatic career change. Sometimes it&#8217;s simply the next stage of your technical career.&#8221;<\/span><\/p>\n<p><b>What can you do if the direct route isn&#8217;t opening up yet?<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Hayley&#8217;s first piece of advice is to keep strengthening the foundations: networking, infrastructure, identity, cloud and endpoints. It can feel like you&#8217;re standing still, but this is the knowledge that makes you valuable once you do move across.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It&#8217;s also worth getting closer to security work in your current role. Many people make this move without changing employers first. If there&#8217;s a security project happening in your team, put your hand up for it. The more involved you become in that work, the more your experience starts to look like security engineering on a CV, and the easier the conversation becomes when you apply for a cyber security role.<\/span><\/p>\n<p><b>Who already works in cyber security that you could learn from?<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Build relationships with people already working in cyber security. Ask them how they got there and what their employers actually value. You&#8217;ll often find their path looked a lot like yours. And while you&#8217;re at it, look sideways as well as upwards. IAM, cloud security and security engineering can all be excellent transition points, even if they&#8217;re not the role you eventually want.<\/span><\/p>\n<p><b>What do Cyber Security Managers actually look for?<\/b><\/p>\n<p><span style=\"font-weight: 400;\">One of the most common requests Hayley gets from Cyber Security Managers is for candidates with strong foundations in infrastructure, networking and cloud. The reason comes down to understanding.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">&#8220;Having that foundational knowledge means you understand not just <\/span><i><span style=\"font-weight: 400;\">what<\/span><\/i><span style=\"font-weight: 400;\"> you&#8217;re securing or changing, but <\/span><i><span style=\"font-weight: 400;\">why<\/span><\/i><span style=\"font-weight: 400;\"> those changes need to happen in the first place.&#8221;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Without it, she explains, you can find yourself following processes, implementing controls and completing tasks without really understanding the risks you&#8217;re addressing or the impact of the changes you&#8217;re making. Or, in her words: &#8220;It&#8217;s about understanding the technology you&#8217;re protecting, not just the security tools you&#8217;re using.&#8221;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The same pattern shows up in DevSecOps, which is becoming an increasingly common route into cyber security. These are usually people who started in DevOps and moved gradually into security through IAM, secrets management, cloud security or securing CI\/CD pipelines. But there&#8217;s a catch. Hiring managers often still want DevOps Engineers who originally came from infrastructure, networking or systems administration. Those people stand out because they already understand how systems communicate and where the risks sit, and they&#8217;ve built automation, Infrastructure as Code and containerisation skills on top of that.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">So if you&#8217;re coming from infrastructure, you&#8217;re holding the hardest part to teach.<\/span><\/p>\n<p><b>Frequently asked questions<\/b><\/p>\n<p><b>Do I need to start in a junior cyber security role?<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Not necessarily. Junior cyber security roles are becoming harder to find as AI takes on more entry-level work. For most Infrastructure Engineers, a sideways move into an area like IAM or cloud security, using the experience you already have, is the more realistic route.<\/span><\/p>\n<p><b>Will I take a pay cut moving into cyber security?<\/b><\/p>\n<p><span style=\"font-weight: 400;\">It depends on the level you move in at, but there&#8217;s a lot of overlap. In our salary guide, a senior Infrastructure Engineer in Sydney or Melbourne sits around 120k-140k+, while a mid-level Security Engineer sits around 110k-150k+ and a senior one 150k-180k+ (permanent, base excluding super).<\/span><\/p>\n<p><b>Can I move from DevOps into DevSecOps?<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Yes, it&#8217;s an increasingly common route<\/span><b>, <\/b><span style=\"font-weight: 400;\">and you&#8217;ll stand out most if your DevOps skills sit on top of an infrastructure, networking or systems administration background.<\/span><\/p>\n<p><b>Which cyber security skills are employers asking for most?<\/b><\/p>\n<p><span style=\"font-weight: 400;\">In our 2026\/27 report, the top skills in cyber security roles were SIEM, IAM and DFIR (digital forensics and incident response). IAM is the one most Infrastructure Engineers already have a head start in.<\/span><\/p>\n<p><b>Thinking about making the move?<\/b><\/p>\n<p><span style=\"font-weight: 400;\">If you&#8217;re an Infrastructure, Cloud or Network Engineer weighing up a move into cyber security, <\/span><a href=\"https:\/\/www.thedrivegroup.com.au\/team-member\/hayley-bee\/\"><span style=\"font-weight: 400;\">have a chat with Hayley<\/span><\/a><span style=\"font-weight: 400;\">. She can tell you which sideways step makes sense for your background and what employers are asking for right now. Or browse our live <\/span><a href=\"https:\/\/www.thedrivegroup.com.au\/jobs\/cla_cyber-security\/\"><span style=\"font-weight: 400;\">cyber security jobs<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>You don&#8217;t need to start again. For most Infrastructure Engineers, the move into cyber security is a sideways step rather than a leap: you take the part of infrastructure you already know best, whether that&#8217;s identity, cloud or networking, and lean into the security side of it. A Systems Engineer working heavily with Entra ID&hellip;<\/p>\n","protected":false},"author":17,"featured_media":17865,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_titles_title":"How to Move From Infrastructure Into Cyber Security","_seopress_titles_desc":"Moving from infrastructure into cyber security? Hayley Bee explains the sideways routes, like IAM and cloud security, that Aussie employers value most.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"moving from infrastructure into cyber security,infrastructure to cyber security career,how to get into cyber security in Australia,career change into cyber security,transition to cyber security from IT,cyber security career path,how do I move from infrastructure to cyber security,can a systems engineer move into cyber security,how to move from network engineer to network security,cloud engineer to cloud security,how to get into IAM,DevOps to DevSecOps career path,do I need to start in a junior cyber security role,will I take a pay cut moving into cyber security,How Do I Move From Infrastructure Into Cyber Security,cyber security market,What do Cyber Security Managers actually look for,Will I take a pay cut moving into cyber security,Can I move from DevOps into DevSecOps,Which cyber security skills are employers asking for most,cyber security skills","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":""},"categories":[51],"tags":[],"class_list":["post-17864","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-career-tips"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.thedrivegroup.com.au\/af-api\/wp\/v2\/posts\/17864","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thedrivegroup.com.au\/af-api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thedrivegroup.com.au\/af-api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thedrivegroup.com.au\/af-api\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thedrivegroup.com.au\/af-api\/wp\/v2\/comments?post=17864"}],"version-history":[{"count":5,"href":"https:\/\/www.thedrivegroup.com.au\/af-api\/wp\/v2\/posts\/17864\/revisions"}],"predecessor-version":[{"id":17870,"href":"https:\/\/www.thedrivegroup.com.au\/af-api\/wp\/v2\/posts\/17864\/revisions\/17870"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.thedrivegroup.com.au\/af-api\/wp\/v2\/media\/17865"}],"wp:attachment":[{"href":"https:\/\/www.thedrivegroup.com.au\/af-api\/wp\/v2\/media?parent=17864"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thedrivegroup.com.au\/af-api\/wp\/v2\/categories?post=17864"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thedrivegroup.com.au\/af-api\/wp\/v2\/tags?post=17864"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}