Cryptographic Security Engineer

Whizdom; Canberra; On-site; AUD 90,000 - 140,000; Full time

Benefits offered by this job

Same-day contractor payments

DISP certified

Diversity commitment

Job summary

Whizdom is seeking a Cryptographic Security Engineer for a high-profile Australian Government project based in Canberra. You will design, implement and operate enterprise key management systems, handling PKI, HSMs and cloud encryption in secure multi-classified environments.

You will collaborate with cyber security, architecture and engineering teams, applying Secure-by-Design principles, producing technical artefacts and runbooks to support accreditation activities.

Qualifications

• Experience implementing cryptographic solutions in enterprise/government environments.
• Public Key Infrastructure operations and certificate lifecycle management.
• Protecting data at rest and in transit with modern encryption technologies.
• Cryptographic key management and Hardware Security Modules administration.

Responsibilities

• Design, deploy and configure enterprise key management infrastructure.
• Implement cryptographic key lifecycle processes including generation, rotation and destruction.
• Configure and support Key Management Systems and Hardware Security Modules.
• Implement encryption controls across enterprise systems and platforms.
• Integrate cryptographic capabilities with applications, infrastructure and identity services.
• Support PKI, certificate management and machine identity services.
• Configure encryption services across cloud, hybrid and on-prem environments.
• Develop secure API integrations, automation scripts and deployment mechanisms.
• Support security assessments, risk analysis and accreditation activities.
• Investigate and remediate vulnerabilities in cryptographic systems.
• Participate in security reviews, design assurance and accreditation activities.
• Monitor health and performance of cryptographic services.
• Develop runbooks and technical documentation.
• Provide specialist technical support to operational and project teams.

Skills

Cryptographic solutions

PKI operations

HSM administration

Encryption technologies

Secure communications

Security hardening

Security risk assessment

Documentation

Collaboration

Education

Cyber security degree

Security certifications

Tools

InfoSec Manual familiarity

Cloud cryptography (Azure/AWS)

Job description

About the Client

Our client is a high-profile Australian Government organisation responsible for protecting Australia’s national interests against sophisticated global and cyber threats. Operating within a highly secure and technically complex environment, the organisation delivers critical intelligence, cyber security and security capabilities that support the Australian Government. This is an opportunity to contribute to nationally significant work while collaborating with experienced cyber security, architecture, infrastructure, cloud and engineering professionals.

About the Role

The Cryptographic Security Engineer will support the design, implementation, integration, operation and security assurance of an enterprise-scale Key Management System operating across complex, multi-classified technology environments. Operating at SFIA Level 4, you will provide hands‑on technical expertise across cryptographic technologies, key lifecycle management, Hardware Security Modules, certificate services and encryption solutions.

Key responsibilities will include:

• Designing, deploying and configuring enterprise key management infrastructure
• Implementing cryptographic key lifecycle processes, including generation, storage, rotation, archival, recovery and destruction
• Configuring and supporting Key Management Systems and Hardware Security Modules
• Implementing encryption controls across enterprise systems and platforms
• Integrating cryptographic capabilities with applications, infrastructure and identity services
• Supporting Public Key Infrastructure, certificate management and machine identity services
• Configuring encryption services across cloud, hybrid and on-premises environments
• Developing secure API integrations, automation scripts and deployment mechanisms
• Supporting security assessments, technical risk analysis and compliance activities
• Investigating and remediating vulnerabilities affecting cryptographic systems
• Participating in security reviews, design assurance and accreditation activities
• Monitoring the health, performance, availability and resilience of cryptographic services
• Developing operational procedures, runbooks and technical documentation
• Providing specialist technical support and advice to operational and project teams

The Successful Candidate

The successful candidate will be an experienced security or cryptographic systems engineer with strong technical knowledge and a practical approach to implementing secure ICT systems and services.

You will bring demonstrated experience in:

• Implementing and supporting cryptographic solutions within enterprise or government environments
• Public Key Infrastructure operations and certificate lifecycle management
• Protecting data at rest and in transit through contemporary encryption technologies
• Cryptographic key management and administration of Hardware Security Modules
• Secure communications technologies and cryptographic protocols
• Security hardening and implementation of cryptographic controls
• Investigating and remediating security weaknesses within cryptographic systems
• Applying contemporary cyber security and Secure-by-Design principles
• Supporting security-focused projects and operational services
• Contributing to technical implementation, integration, deployment and transition activities
• Identifying, assessing and documenting technical security risks
• Supporting security assessments, compliance reviews and accreditation activities
• Producing clear technical documentation and security artefacts
• Working collaboratively with engineers, architects, project teams and business stakeholders

Highly regarded experience and qualifications include:

• A degree, diploma or equivalent experience in cyber security, information technology, computer science, mathematics, engineering or a related discipline
• Security+, CISSP Associate, GIAC or comparable security certifications
• Cryptographic security, encryption, cloud security, KMS or HSM training
• Familiarity with the Information Security Manual, Protective Security Policy Framework and Essential Eight
• Experience supporting cloud cryptography across Azure, AWS or other government-approved platforms
• Experience with certificate authorities, secure communications platforms or enterprise key management capabilities
• Previous experience within Defence, the National Intelligence Community or another Commonwealth environment

Candidates must also be willing to undergo an Organisational Suitability Assessment (OSA) prior to engagement.

Why partner with Whizdom?

We’re Whizdom. We view you as an extension of our strong, dependable brand and have differentiators which really are different! The Whizdom way:

• We pay our contractors same day you submit your timesheet!
• We are Level 3, DISP certified and have signed the Veteran Employment Commitment and been awarded the highest level of compliance to this important initiative, proactively assisting veterans transitioning from the forces to civilian roles. We’ve been lucky enough to win industry awards for our high level of process compliance and are ISO 9001 certified. Our commitment to reducing Greenhouse Gas Emissions has been accredited in line with large global organisations.
• We value diversity and welcome applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability.

Location:

The role is based in Canberra ACT.

Contract terms:

12 months from commencement date, plus 2x 12 month extensions

Experience Level:

APS5 Equivalent

Security Requirements:

Candidates must hold an active or reactivatable Top Secret Positive Vetting (TSPV) Security Clearance on submission. Our client is not looking to upgrade an existing clearance for this position. An OSA (Organisational Suitability Assessment) will be required for this position.

Applications open until 8am 06 October 2026.

Reach Damien on 0480 002 503 or [e-mail] for any further information.

Candidates will need to be willing to undergo pre-employment screening checks which may include, ID and work rights, security clearance verification and any other client requested checks.