Cryptography Security Engineer - TSPV

Compas; Canberra; On-site; AUD 120,000 - 180,000; Full time

Job summary

Compas in Canberra is seeking a Cryptography Security Engineer to design and deploy enterprise KMS infrastructure, manage HSMs and cryptographic services across on-prem and cloud environments.

The role requires SFIA Level 4 cryptographic engineering capability, hands-on KMS/PKI/encryption experience, and involvement in security assurance and risk/compliance activities; TSPV clearance is required for this 12-month onsite assignment.

Qualifications

• SFIA Level 4 capability in cryptographic engineering or equivalent.
• Experience with KMS, HSMs, PKI, encryption and cryptographic key management.
• Experience supporting security assurance, risk and compliance activities.

Responsibilities

• Design, deploy and configure enterprise KMS infrastructure and cryptographic services.
• Implement key lifecycle processes and support HSMs, encryption and certificate services.
• Integrate cryptographic capabilities across cloud, hybrid-cloud and on-premises environments.
• Support security assessments, hardening, vulnerability remediation and assurance activities.

Skills

Cryptographic engineering

KMS

HSMs

PKI

Encryption

Security assurance

Job description

Job Title: Cryptography Security Engineer | KMS & HSM Support enterprise cryptographic engineering across secure ICT environments, working with Key Management Systems (KMS), Hardware Security Modules (HSMs), PKI and encryption services. This Canberra-based role is onsite, with regular WFH unable to be accommodated; occasional requests may be considered.

Location: Canberra, ACT

Work Arrangement: Onsite – regular WFH cannot be accommodated; occasional requests considered.

Contract Duration: 12 months, with possible 2 x 12-month extensions

Security Clearance Requirement: TSPV

Closing Date: 10.00am, 7 October 2026

Essential Tasks

• Design, deploy and configure enterprise KMS infrastructure and cryptographic services.
• Implement key lifecycle processes and support HSMs, encryption and certificate services.
• Integrate cryptographic capabilities across cloud, hybrid-cloud and on-premises environments.
• Support security assessments, hardening, vulnerability remediation and assurance activities.

Key Criteria

• SFIA Level 4 capability in cryptographic engineering or equivalent.
• Experience with KMS, HSMs, PKI, encryption and cryptographic key management.
• Experience supporting security assurance, risk and compliance activities.
• Strong technical communication and multidisciplinary stakeholder collaboration skills.

Due to the nature of this environment, candidates must hold a current TSPV clearance.