Cloud Security Architect

Data#3; Canberra; Hybrid; AUD 170,000 - 210,000; Full time

Benefits offered by this job

Long-term engagement

Flexible locations

Job summary

Data#3 is seeking two experienced Cloud Security Architects to deliver secure cloud architectures for a large Australian Government environment in Canberra and other major cities.

You will translate security requirements into practical controls, align with ASD ISM and Essential Eight, and guide project teams with risk-based, secure-by-design recommendations.

Flexible location options across Canberra, Sydney, Melbourne and other Australian locations; NV1 security clearance is required.

Qualifications

• Experience designing secure cloud architectures in large ICT environments.
• Strong Azure knowledge with AWS experience desirable.
• Proven ability to implement ASIS/ISM and Essential Eight controls.
• Ability to translate security requirements into practical controls.
• Excellent stakeholder engagement and communication skills.
• Experience with risk-based security design and threat modelling.

Responsibilities

• Develop, review and provide assurance over cloud security architectures, designs, patterns and technical solutions.
• Provide practical security architecture advice to project and delivery teams, applying secure-by-design and risk-based principles.
• Assess cloud solutions against the ASD ISM, Essential Eight and relevant security policies and standards.
• Provide architectural guidance across cloud security domains including IAM, network security, encryption, key management, logging and monitoring.
• Identify security risks and design architectural controls and mitigations balancing security with delivery needs.
• Collaborate to develop reusable security patterns and guardrails across teams.
• Research emerging cloud technologies and threats and advise on security implications.
• Communicate security risks and recommendations to technical and non-technical stakeholders.

Skills

Azure cloud security

Security architecture

Zero Trust

ISM/Essential Eight

Stakeholder engagement

Threat modelling

Education

Tertiary qualifications in Cyber Security or IT

Tools

Azure

AWS

GRC tools

Job description

Location: Canberra, Melbourne, VIC preferred. Other locations can be considered
Engagement: Full-time, long-term contract
Contract Period: ASAP to 30 June 2027, with extension options
Security Clearance: NV1 required

About the Role

We’re seeking two experienced Cloud Security Architects to provide specialist security architecture advice across the design and delivery of secure cloud services and solutions within a large and complex Australian Government environment.

You’ll work closely with technology architecture, cyber security, cloud platform and project delivery teams to ensure cloud solutions are secure by design, fit for purpose and aligned with Australian Government security requirements.

This is an opportunity to apply your cloud security architecture expertise across enterprise environments, providing practical guidance, architectural assurance and risk-based recommendations throughout the solution lifecycle.

Key Responsibilities

• Develop, review and provide assurance over cloud security architectures, designs, patterns and technical solutions.

• Provide practical security architecture advice to project and delivery teams, applying secure-by-design and risk-based principles.

• Assess cloud solutions against the ASD Information Security Manual (ISM), Essential Eight and relevant security policies and standards.

• Provide architectural guidance across cloud security domains, including identity and access management, privileged access, network security, encryption, key management, logging and monitoring, data protection and workload security.

• Identify security risks and design appropriate architectural controls and mitigations while balancing security, business and delivery requirements.

• Collaborate with cloud, infrastructure, application, cyber security and engineering specialists to develop reusable security patterns and guardrails.

• Research emerging cloud technologies and threats, providing advice on their security implications and appropriate use.

• Communicate security risks, architectural decisions and recommendations to technical and non-technical stakeholders.

About You

You’re an experienced Cloud Security Architect or Security Architect with strong practical experience designing and assuring secure cloud solutions in large and complex ICT environments.

You can translate security requirements into practical architectural controls, balance security and business needs, and confidently engage with stakeholders across architecture, cyber security and technology delivery teams.

Essential Skills & Experience

• Strong experience as a Cloud Security Architect, Security Architect or senior cloud security specialist in a large and complex ICT environment.

• Strong practical knowledge of security architecture within Microsoft Azure. AWS experience is also desirable.

• Strong understanding of cloud identity, Zero Trust, network security, encryption, secrets and key management, security monitoring, vulnerability management and cloud-native security controls.

• Experience interpreting and applying the ASD Information Security Manual (ISM) and Essential Eight within cloud environments.

• Experience conducting cyber security risk assessments and translating security requirements into practical architecture and design controls.

• Strong stakeholder engagement, analytical and communication skills.

Desirable Experience & Qualifications

• Relevant cloud security certifications, such as:

  • Microsoft Certified: Cybersecurity Architect Expert (SC-100)

  • Microsoft Certified: Azure Security Engineer Associate (AZ-500)

  • AWS Certified Security – Specialty

  • Certified Cloud Security Professional (CCSP)

  • Certified Information Systems Security Professional (CISSP)

• Tertiary qualifications in Cyber Security, Computer Science, Information Technology or a related discipline.

• Experience working within Australian Government or similarly regulated environments.

• Experience with Australian Government Governance, Risk and Compliance (GRC) and Authority to Operate (ATO) processes, including developing or contributing to Statements of Duties (SODs), Security Risk Management Plans (SRMPs), System Security Plans (SSPs) and associated security documentation.

• Familiarity with enterprise architecture frameworks such as TOGAF and security frameworks such as NIST CSF or ISO/IEC 27001.

Why Apply?

• Two opportunities available within a large and complex government ICT environment.

• Work across enterprise cloud security architecture and secure-by-design initiatives.

• Influence cloud security decisions, architectural standards and technical controls.

• Join a long-term engagement with extension potential.

• Flexible location options across Canberra, Sydney, Melbourne and other Australian locations.

Security Requirement

Candidates must hold an NV1 security clearance.