Cryptography Security Engineer

Peoplebank; Canberra; On-site; AUD 130,000 - 180,000; Full time

Job summary

Peoplebank seeks a Cyber Security Engineer with cryptography and key management expertise to deliver enterprise cryptographic services within a highly secure government context. The role is onsite in Canberra, requiring current TSPV clearance and strong PKI experience.

You will design, implement and support PKI environments, manage key lifecycles, configure encryption for data at rest and in transit, and integrate cryptographic capabilities with cloud and on-premise platforms.

Qualifications

• Experience as a Security Engineer, Cryptography Engineer, PKI Engineer, Cyber Security Engineer or similar role.
• Strong understanding of cryptographic principles, encryption technologies and secure communications.
• Experience with PKI, certificate authorities, certificate lifecycle management, KMS, HSM, encryption solutions.
• Experience supporting secure system integration across enterprise environments.
• Knowledge of security hardening, vulnerability management and security-by-design principles.
• Ability to investigate and resolve complex technical and security issues.
• Strong written and verbal communication skills.

Responsibilities

• Design, implement and support enterprise cryptographic services and key management capabilities.
• Administer and support Public Key Infrastructure (PKI) environments and certificate lifecycle management processes.
• Configure and maintain encryption technologies used to protect data at rest and in transit.
• Support Hardware Security Module (HSM) platforms and associated cryptographic services.
• Integrate cryptographic capabilities with enterprise applications, cloud platforms and infrastructure services.
• Implement and maintain security controls aligned to government security frameworks and standards.
• Conduct security assessments, risk analysis and remediation activities.
• Develop technical documentation, operational procedures and support artefacts.
• Collaborate with architects, engineers, cyber security teams and project stakeholders to deliver secure outcomes.
• Support operational activities including incident investigation, system monitoring and service improvement initiatives.

Skills

Cryptography

PKI

Key Management

HSM

Security engineering

Cloud security

Communication

Scripting (PowerShell/Python)

Education

Cyber Security degree

CISSP

Azure/AWS Security cert

Tools

Azure Key Vault

AWS KMS

HashiCorp Vault

Venafi

Thales HSM

Entrust HSM

Job description

Cyber Security Engineer (Cryptography & Key Management) Federal Government Client
Location: Canberra, ACT (Onsite)
Security Clearance: Current TSPV Required
Contract: 12 Months + Extension Options
About the Opportunity Our Federal Government client is seeking an experienced Cyber Security Engineer with expertise in Cryptography and Key Management to support the delivery and sustainment of enterprise-scale security capabilities within a highly secure environment.
Working as part of a multidisciplinary cyber security team, you will contribute to the design, integration, operation and assurance of cryptographic services that support critical government systems. This role will suit a security professional with hands-on experience across encryption technologies, Public Key Infrastructure (PKI), key management solutions and secure system integration.

Key Responsibilities

• Design, implement and support enterprise cryptographic services and key management capabilities.
• Administer and support Public Key Infrastructure (PKI) environments and certificate lifecycle management processes.
• Configure and maintain encryption technologies used to protect data at rest and in transit.
• Support Hardware Security Module (HSM) platforms and associated cryptographic services.
• Integrate cryptographic capabilities with enterprise applications, cloud platforms and infrastructure services.
• Implement and maintain security controls aligned to government security frameworks and standards.
• Conduct security assessments, risk analysis and remediation activities.
• Develop technical documentation, operational procedures and support artefacts.
• Collaborate with architects, engineers, cyber security teams and project stakeholders to deliver secure outcomes.
• Support operational activities including incident investigation, system monitoring and service improvement initiatives.

Essential Skills & Experience

• Demonstrated experience as a Security Engineer, Cryptography Engineer, PKI Engineer, Cyber Security Engineer or similar role.
• Strong understanding of cryptographic principles, encryption technologies and secure communications.
• Experience with:
  • Public Key Infrastructure (PKI)
  • Certificate Authorities and certificate lifecycle management
  • Key Management Systems (KMS)
  • Hardware Security Modules (HSM)
  • Encryption solutions and cryptographic controls
• Experience supporting secure system integration across enterprise environments.
• Knowledge of security hardening, vulnerability management and security-by-design principles.
• Ability to investigate and resolve complex technical and security issues.
• Strong written and verbal communication skills.

Desirable Experience

• Experience working within Federal Government, Defence or National Security environments.
• Familiarity with Australian Government security frameworks including ISM, PSPF and Essential Eight.
• Experience with cloud security technologies including Azure, AWS or other government-approved cloud environments.
• Experience with platforms such as Azure Key Vault, AWS KMS, HashiCorp Vault, Venafi, Thales or Entrust HSM technologies.
• Scripting and automation experience using PowerShell, Python or similar technologies.

Qualifications

• Degree qualification in Cyber Security, Information Technology, Computer Science, Engineering or related discipline, or equivalent experience.
• Relevant industry certifications such as CISSP, Security+, GIAC, Certified Encryption Specialist, Azure Security, AWS Security or similar.

Security Clearance Candidates must hold a current TSPV Security Clearance and be willing to work onsite in Canberra. Candidates without an active clearance cannot be considered.

Peoplebank and Leaders IT are committed to creating a diverse and inclusive workplace where everyone belongs. We welcome applications from people of all backgrounds, identities, and experiences. If you need adjustments to the recruitment process due to your circumstances, please let us know- we're here to support you.