Professional profile
Daniel Franjkovic
Systems Engineer - Lead Automation
Profile
I design and ship operational platforms, security automations and AI-assisted workflows that make complex work visible, reviewable and easier to run. My work spans automation, infrastructure and cyber security in operational environments.
Experience
January 2025 to present
Systems Engineer - Lead Automation
Department of Education
Build and maintain Splunk SOAR automations for IT Operations, including account-compromise and malicious URL workflows with multi-source analysis and in-house LLM verdict support. Use PowerShell and Python to improve operational hand-offs and support Intune, Splunk, AWS, Azure AD, Red Hat Linux and ServiceNow.
January 2024 to January 2025
Core Intune Infrastructure Senior Consultant
Department of Education, contract via Capgemini / Empired
Designed Intune policies, configuration profiles and practical standards for secure device management.
March 2022 to December 2023
Senior Consultant / IT Specialist Contractor
Department of Education, contract via Capgemini / Empired
Delivered Azure scripting, Exchange, Microsoft 365, identity and Splunk Phantom automation support.
August 2021 to March 2022
IT Technician
MedHealth
Supported healthcare technology projects, including SharePoint, Teams administration, Azure and modern workplace tooling.
July 2020 to August 2021
ICT Coordinator - Cyber Security
Foodbank Victoria
Coordinated ICT support, security monitoring, Azure AD migration support, permissions and user training for a 90+ user environment.
June 2019 to July 2020
IT Support Technician - Cyber Security
UDIT
Resolved Level 1-3 support tickets and supported Microsoft 365, Azure, server maintenance, project rollouts and workplace cyber security initiatives.
Selected consulting engagement
June 2025 to February 2026, after-hours contract
Specialist Consultant
Delivery Operations Platform, private client
Led six developers on internal tooling, AWS optimisation and delivery platform improvement, alongside primary employment. Helped reduce monthly operating costs from approximately $18,000 to $2,000 through EC2 optimisation, fewer managed-platform dependencies and application improvements.
Built task-specific LLM agents and contributed to tooling for delivery tracking, driver and contractor allocation, and historical incident investigation.
Selected impact
- Built Splunk SOAR workflows for malicious URLs and suspicious mailbox activity, combining enrichment, LLM verdicts, ticketing, token revocation and account protection.
- Supported Intune and infrastructure across a Victorian education environment of more than 20,000 devices.
- Led delivery of a private operations platform, helping reduce monthly managed-dependency costs from about $18,000 to $2,000.
Projects and writing
A platform for analysing, documenting and modernising PowerShell estates, with inert script analysis, review gates and living SOPs.
A single-agent orchestration pattern built around one persistent core, on-demand role files and shared validation guardrails.
Writing on AI-generated ID imagery, privacy, corporate incentives and oversight.
Education
University of Melbourne
Master of Cyber Security, 2022 to 2024. Bachelor of Cyber Security, 2020 to 2022. Completed through a combined four-year study pathway.
Further qualifications
Advanced Diploma in Cyber Security, Box Hill Institute, 2019 to 2020. Certificate IV in Cyber Security, Chisholm Institute, 2018.
Recognition and interests
Value Award, Empired / EPA, 2022. Golden Spoon Award, Foodbank Victoria, 2021.
Outside work: motorcycle enthusiast. Rebuilt a Honda 125cc from parts and maintains and rides a Triumph Daytona 600.