EL2 Lead Cyber Security Architect

SoftLabs; Brisbane; Hybrid; AUD 165,000 - 248,000; Full time

Job summary

SoftLabs invites a Security Architect to design, review and assure security across ICT environments. You translate business needs into secure architectures, lead governance, and guide delivery teams to protect critical services while enabling delivery in a fast-paced agency setting.

With practical Azure/AWS and on-premise security expertise, you identify gaps, propose risk-based options, and drive secure-by-design architectures.

Qualifications

• Knowledge of cyber/security domain frameworks and governance
• Strong communication and negotiation skills
• Experience applying Australian Government cyber security frameworks
• Ability to design secure, hybrid architectures
• Experience delivering pragmatically in large organisations

Responsibilities

• Translate business and ICT requirements into architectures
• Develop architecture artefacts aligned with roadmaps and standards
• Assess gaps and recommend risk-based solutions
• Lead architecture activities and coordinate stakeholder input
• Provide technical advice and resolve complex risks
• Build relationships and negotiate outcomes with stakeholders
• Think strategically to develop long-term plans in complex environments
• Promote innovation and knowledge sharing across the agency
• Share knowledge across the team and APS personnel

Skills

Security architecture

Cloud security

Zero trust

Governance

Stakeholder management

Tools

Azure

AWS

On-premises security

Job description

• Initial Contract Duration: Up to 12 months
• Location: QLD, WA, VIC, NSW, SA
• Security Requirements: Must have Baseline
• Working Arrangements: Hybrid
• The Labour Hire Worker is expected to work onsite for the first 6 weeks before a hybrid flexible working arrangement can be considered, unless otherwise negotiated. A hybrid flexible working arrangement may then be considered, ensuring the Labour Hire Worker’s residing address is within reasonable travel time and distance of the RFQ location to present onsite in cases of emergency or to meet business requirements. The location is the capital city of selected state/s.
• Maximum hours: Standard working hours are 40 hours per week. Workers may be required to work additional hours, provided the total working hours do not exceed a maximum of 80 hours per week.

Job details

Security Architects design, review, test and assure the technical environment, solution designs and solution implementations in accordance with current and emerging security best practice. They contribute to the technical architecture and security policies and practices.

The role provides security architecture and technical direction to ensure solutions, platforms and services are secure by design. Operating with substantial autonomy in a large, fast-paced environment, the Security Architect translates business and functional requirements into secure, integrated ICT solutions. The role develops fit-for-purpose architectures, establishes security standards and governance, leads security design across the solution lifecycle, resolves architectural exceptions, and provides practical advice that enables delivery teams to meet commitments while protecting the agency. It applies sound judgement to drive innovation, support organisational change and align technology outcomes with the agency’s strategic direction.

Key duties and responsibilities

Duties may include some or all of the following:

• Translate business and ICT requirements into conceptual, logical and end-to-end solution architectures aligned with strategic and operational priorities.
• Develop and maintain solution architecture artefacts that align with Architecture Review Taskforce (ART) roadmaps, enterprise architecture standards and broader technology strategies, ensuring traceability between business priorities, planned capabilities and delivery outcomes.
• Consider industry standards and emerging technologies, assess capability gaps and recommend solution options that inform technology and cyber/security strategy and direction.
• Lead solution analysis, integrate stakeholder input and develop architecture artefacts, options and recommendations that support executive decision-making.
• Provide technical advice, coordinate architecture activities and identify, communicate and resolve complex issues and risks.
• Build and maintain relationships, communicate effectively with diverse audiences and negotiate outcomes with internal and external stakeholders.
• Build and maintain relationships, communicate effectively with diverse audiences and negotiate outcomes with internal and external stakeholders.
• Think strategically, identify interdependencies and exercise sound judgement in ambiguous environments to develop long‑term plans and deliver quality outcomes in complex environments.
• Promote innovation, continuous improvement and knowledge sharing to strengthen architecture capability across the agency.
• Share knowledge and build capability across the team and key APS personnel.

Technical skills

• Practical knowledge of securing Azure, AWS and on-premises environments, including identity and access management, encryption, key management and network controls.
• Ability to identify security and architectural gaps, collaborate with key stakeholders and recommend clear, risk-based solutions.
  
• Ability to design secure solution architectures incorporating hybrid environments, zero trust, network segmentation and secure‑by‑design principles.
• Strong knowledge of the ACSC Information Security Manual, Essential Eight, Protective Security Policy Framework, NIST Cybersecurity Framework, ISO/IEC 27001 and applicable privacy requirements.
  

Knowledge / Qualifications:

• Knowledge of cyber/security domain frameworks, legislation, policies and procedures
• Understanding of relevant business systems and tools
• Strong communication and negotiation skills
• Professional presentation skills
  
• Demonstrated ability to analyse complex business issues within the cyber security domain;deliver pragmatic, risk-based recommendations; influence stakeholders; collaborate acrossmultidisciplinary teams; and transfer knowledge to APS personnel.
• Knowledge of architecture principles and end‑to‑end solution design, including the integration of cyber security requirements throughout the architecture lifecycle.
• Experience applying Australian Government cyber security, protective security, resilience and architecture governance frameworks.
• Experience designing secure systems that support critical government services, including system and subsystem boundaries, centralised monitoring, cyber security technologies and security automation.
• Strong written and verbal communication skills, with demonstrated experience presenting clear architectural advice and recommendations to senior governance bodies and executive forums.

Application Deadline: Monday, 09 November 2026

Expected Start Date: Friday, 01 January 2027

Job Type: Contract