Lead Cryptography Security Engineer

Client 1; Canberra; On-site; AUD 220,000 - 300,000; Full time

Job summary

Australian Signals Directorate (ASD) is seeking an experienced Lead Cryptography Security Engineer to design, implement and operate an enterprise-scale Key Management System across a multi-classified environment.

The role focuses on cryptographic systems, key lifecycle management, HSMs, certificates, encryption technologies and secure integration patterns, working with architects, cyber security and cloud teams to deliver resilient cryptographic capabilities.

Qualifications

• Enterprise cryptography and encryption technologies.
• PKI design and lifecycle management.
• Key Management Systems (KMS).
• Hardware Security Modules (HSMs).
• Cryptographic assurance and risk assessments.
• Security architecture and secure systems integration.

Responsibilities

• Design, deploy and configure enterprise KMS infrastructure.
• Manage cryptographic key lifecycle: generation, rotation, storage, destruction.
• Configure and support Hardware Security Modules (HSMs).
• Support encryption key management across enterprise platforms.
• Conduct testing, validation and operational readiness activities.
• Develop engineering standards, procedures and implementation guidance.
• Ensure cryptographic platforms meet availability, resilience and performance requirements.
• Integrate KMS with enterprise applications and infrastructure.
• Implement secure API-based cryptographic services.
• Support identity and access management integrations.
• Configure encryption services across cloud, hybrid and on-premises environments.
• Support certificate management and machine identity services.
• Troubleshoot interoperability and integration issues.
• Develop automation and deployment capabilities where required.
• Implement controls aligned with ASD ISM, PSPF and security architecture requirements.

Skills

Enterprise cryptography

PKI design

KMS

HSMs

Risk assessments

Security architecture

Cloud cryptography

ISM/PSPF/Zero Trust

Stakeholder engagement

Business translation of crypto

Job description

Role Title

Lead Cryptography Security Engineer

Location

Canberra, ACT

Working Arrangement

Onsite

Clearance Required

Current AGSVA TSPV Security Clearance mandatory. Candidates must also be able to satisfy ASD Organisational Suitability Assessment (OSA) requirements. ASD will not sponsor clearance upgrades.

Company Overview

Our client, the Australian Signals Directorate (ASD), is a statutory agency within the Defence portfolio responsible for defending Australia against global threats and advancing national interests through foreign signals intelligence, cyber security, and offensive cyber operations.

Job Description

We are seeking an experienced Lead Cryptography Security Engineer (SFIA Level 5 / EL1 equivalent) to support the design, implementation, integration, operation and security assurance of an enterprise-scale Key Management System (KMS) capability across ASD's multi-classified environment.
This role will provide specialist expertise in cryptographic systems, key lifecycle management, hardware security modules (HSMs), certificate services, encryption technologies and secure integration patterns. The successful candidate will work closely with architects, cyber security specialists, infrastructure teams, cloud engineers and vendors to deliver resilient and secure cryptographic capabilities.

Duties and Responsibilities

Cryptographic Engineering

• Design, deploy and configure enterprise key management infrastructure.
• Implement cryptographic key lifecycle processes including generation, storage, rotation, recovery and destruction.
• Configure and support Hardware Security Modules (HSMs).
• Support encryption key management across enterprise platforms.
• Conduct testing, validation and operational readiness activities.
• Develop engineering standards, procedures and implementation guidance.
• Ensure cryptographic platforms meet availability, resilience and performance requirements.

System Integration

• Integrate KMS capabilities with enterprise applications and infrastructure.
• Implement secure API-based cryptographic services.
• Support identity, access management and authentication integrations.
• Configure encryption services across cloud, hybrid and on-premises environments.
• Support certificate management and machine identity services.
• Troubleshoot interoperability and integration issues.
• Develop automation and deployment capabilities where required.

Security Engineering

• Implement controls aligned with ASD ISM, PSPF and security architecture requirements.
• Conduct security assessments and risk analysis.
• Support vulnerability management and remediation activities.
• Investigate incidents impacting cryptographic services.
• Participate in accreditation, assurance and security review activities.
• Ensure compliance with approved security baselines and standards.

Operations and Support

• Provide ongoing support for enterprise cryptographic services.
• Monitor system health, performance and availability.
• Develop operational runbooks and documentation.
• Support disaster recovery and business continuity planning.
• Participate in change, release and configuration management.
• Provide specialist advice to project and operational teams.

Knowledge/Skills Required

• Enterprise cryptography and encryption technologies.
• Public Key Infrastructure (PKI) design and lifecycle management.
• Key Management Systems (KMS).
• Hardware Security Modules (HSMs).
• Cryptographic assurance and risk assessments.
• Security architecture and secure systems integration.
• Cloud cryptography controls across AWS and Azure environments.
• Knowledge of ASD ISM, PSPF, Essential Eight and Zero Trust principles.
• Strong stakeholder engagement and communication skills.
• Ability to translate complex cryptographic concepts into business-focused advice.

Employment Benefits

• Opportunity to contribute to nationally significant security programs.
• Long-term engagement with an initial 12-month contract and extension options up to an additional 24 months.
• Work alongside leading cyber security, intelligence and engineering professionals.
• Exposure to enterprise-scale cryptographic capabilities and emerging security technologies.

Diversity and Inclusion

We are committed to creating a diverse and inclusive workplace and encourage applications from individuals of all backgrounds, experiences and perspectives.

Veterans

Veterans and former Australian Defence Force personnel with relevant cyber security, cryptography or intelligence experience are strongly encouraged to apply.