Lead Cryptography Security Engineer

Whizdom; Canberra; On-site; AUD 180,000 - 240,000; Full time

Job summary

Whizdom is seeking a Lead Cryptographic Security Engineer to join a high-security Australian Government environment based in Canberra. The role provides senior technical leadership for an enterprise key management system across secure, classified ICT landscapes.

The successful candidate will design, deploy and operate cryptographic services, manage key lifecycles and ensure robust PKI, HSM and API-based encryption across cloud, hybrid and on‑prem environments.

Qualifications

• Designing, implementing and supporting cryptographic solutions in complex enterprise environments.
• Public Key Infrastructure design, management and lifecycle operations.
• Cryptographic assurance, threat modelling and risk assessment.

Responsibilities

• Designing, deploying and configuring enterprise key management infrastructure and cryptographic services
• Managing cryptographic key lifecycles, including generation, storage, rotation, archival, recovery and destruction
• Configuring and supporting Key Management Systems and Hardware Security Modules
• Integrating cryptographic capabilities with enterprise platforms, applications and infrastructure
• Implementing secure API-based integrations and encryption services across cloud, hybrid and on-premises environments
• Supporting PKI, certificate management and machine identity services
• Conducting technical risk assessments, security assurance and cryptographic solution validation
• Identifying and remediating cryptographic vulnerabilities and security weaknesses
• Supporting security accreditation, compliance, audit and design assurance activities
• Developing engineering standards, runbooks and technical documentation
• Monitoring availability, resilience and performance of enterprise cryptographic services
• Providing specialist advice to technical, operational, project and senior stakeholders

Skills

Cryptographic design

Key Management Systems

HSM configuration

Security risk assessment

Stakeholder communication

Education

Cyber security degree

CISSP/CISM/CCSP

Cloud cryptography certs

Tools

Azure

AWS

KMS / HSM tools

Job description

About the Client

Our client is a high-profile Australian Government organisation responsible for protecting Australia’s national interests against sophisticated global and cyber threats. Operating within a highly secure and technically complex environment, the organisation delivers critical intelligence, cyber security and security capabilities that support the Australian Government. This is an opportunity to contribute to nationally significant work while collaborating with experienced cyber security, architecture, infrastructure, cloud and engineering professionals.

About the Role

The Lead Cryptographic Security Engineer will provide specialist technical leadership across the design, implementation, integration, assurance and operation of an enterprise-scale Key Management System capability. Operating at SFIA Level 5, you will independently provide technical advice and support the delivery of resilient, compliant and secure cryptographic services across complex, multi-classified technology environments.

Key responsibilities will include:

• Designing, deploying and configuring enterprise key management infrastructure and cryptographic services
• Managing cryptographic key lifecycles, including generation, storage, rotation, archival, recovery and destruction
• Configuring and supporting Key Management Systems and Hardware Security Modules
• Integrating cryptographic capabilities with enterprise platforms, applications and infrastructure
• Implementing secure API-based integrations and encryption services across cloud, hybrid and on-premises environments
• Supporting Public Key Infrastructure, certificate management and machine identity services
• Conducting technical risk assessments, security assurance and cryptographic solution validation
• Identifying and remediating cryptographic vulnerabilities and security weaknesses
• Supporting security accreditation, compliance, audit and design assurance activities
• Developing engineering standards, operational procedures, runbooks and technical documentation
• Monitoring the availability, resilience and performance of enterprise cryptographic services
• Providing specialist advice to technical, operational, project and senior stakeholder groups

The Successful Candidate

The successful candidate will be an experienced security or cryptographic systems engineer with the ability to operate independently and provide authoritative specialist advice within complex, secure or classified ICT environments.

You will bring demonstrated experience in:

• Designing, implementing and supporting cryptographic solutions in complex enterprise or classified environments
• Applying contemporary cryptographic principles, protocols and standards
• Public Key Infrastructure design, management and lifecycle operations
• Enterprise Key Management Systems and Hardware Security Modules
• Secure communications, encryption technologies and key distribution mechanisms
• Cryptographic assurance, validation, threat modelling and risk assessment
• Security architecture and the integration of cryptographic controls
• Delivering security outcomes within Commonwealth, Defence, national security or similarly regulated environments
• Supporting system accreditation, certification, compliance or assurance activities
• Communicating complex cryptographic concepts to technical and non-technical stakeholders
• Managing competing priorities and delivering high-quality outcomes within agreed timeframes

Highly regarded experience and qualifications include:

• A degree in cyber security, computer science, information security, engineering, mathematics or a related discipline
• CISSP, CISM, CCSP or comparable industry certifications
• Cryptographic security, encryption, cloud security, KMS or HSM certifications
• Familiarity with the Information Security Manual, Protective Security Policy Framework and Essential Eight
• Experience with Secure-by-Design and Zero Trust principles
• Cloud cryptography experience across Azure, AWS or other government-approved platforms
• Exposure to quantum-resistant cryptography, transition planning or emerging cryptographic standards

Candidates must also be willing to undergo an Organisational Suitability Assessment (OSA) prior to engagement.

Location:

The role is based in Canberra ACT.

Contract terms:

12 months from commencement date, plus 2x 12 month extensions

Experience Level:

Senior – EL1 Equivalent

Security Requirements:

Candidates must hold an active or reactivatable Top Secret Positive Vetting (TSPV) Security Clearance on submission. Our client is not looking to upgrade an existing clearance for this position. An OSA (Organisational Suitability Assessment) will be required for this position.

Candidates will need to be willing to undergo pre-employment screening checks which may include, ID and work rights, security clearance verification and any other client requested checks.

Applications open until 8am 06 October 2026.

Reach Damien on 0480 002 503 or [e-mail] for any further information