Principal Security Architect - Operational Technology

Agl; Melbourne; On-site; AUD 180,000 - 260,000; Full time

Benefits offered by this job

Flexible working

Staff discounts

Parental Leave

Recharge Leave

Wellbeing programs

Share reward

Job summary

AGL - Principal Security Architect (OT) role in Melbourne, focusing on secure architectures for OT environments across generation and distribution. You will ensure compliance with SOCI and AESCSF, leveraging expertise in industrial control systems and energy market operations.

You will lead threat modelling, collaborate with cross-functional teams, and define secure reference architectures while mentoring junior architects and guiding security pattern implementation.

Qualifications

• Experience in security engineering and architecture within medium to large multi-business organisations.
• Deep understanding of OT and IT systems, including industrial control systems (SCADA, DCS, PLCs).
• Knowledge of OT network architecture, segmentation, and protocol security.
• Experience with risk assessments and mitigation for OT environments.
• Strong communication and stakeholder engagement skills.
• Ability to translate business requirements into fit-for-purpose security solutions within time and budget.
• Practical application of standards like ISO/IEC 62443, NIST/AESCSF or OT security frameworks.

Responsibilities

• Provide thought leadership on OT security architectures and threat modelling.
• Collaborate with business and technology teams to embed security into OT landscape.
• Define practical security designs aligned with AGL’s strategies; guide engineering on low-level design.
• Lead incident response and provide guidance during major OT security incidents.
• Support OT stakeholders in understanding cybersecurity risks and remediation plans.
• Develop reference architectures, reusable security patterns, use cases and guidelines.
• Stay current on emerging threats and technologies to enhance OT security measures.
• Mentor junior security architects on OT security best practices.

Skills

OT security

Industrial control

Network segmentation

Risk assessment

Stakeholder engagement

Project management

ISO/IEC 62443

CISSP/GICSP/SABSA

Education

CISSP/GICSP/SABSA certifications

Job description

Join the change. Electrify your future!

We've been proudly Aussie since 1837, always finding new ways to innovate in energy and essential services. Now, we're moving towards a sustainable future through electrification and investing in renewable energy—and we’d like you to join us. Whether you're on-site, in the office, or somewhere in between, you'll find opportunities to grow your career here. You'll work with a team that's passionate about powering Australian lives, in a culture that values inclusivity, respect, and learning. Help us create a cleaner energy future, and we’ll back you every step of the way as you build your career.

Join the change. Electrify your future.

About the role

The Principal Security Architect - OT is accountable for designing, developing, and overseeing the implementation of secure architectures within Operational Technology environments spanning generation, distribution, and energy market systems. This role ensures that OT networks, systems, and applications are built and maintained in compliance with corporate cybersecurity standards, the Australian Security of Critical Infrastructure (SOCI) Act, and the Australian Energy Sector Cyber Security Framework (AESCSF). The position requires deep expertise in industrial control systems and networking, combined with a strong understanding of energy market operations, to guarantee the secure and reliable functioning of critical energy infrastructure.

What You’ll Be Doing

• Provide thought leadership based on industry trends and experience. Lead threat modelling, abuse case analysis, and security assessments to identify and mitigate OT vulnerabilities.
• Collaborate with business and technology teams to embed security practices into the OT landscape.
• Define practical, reliable conceptual solution architectures and high-level security designs aligned with AGL’s business and technology strategies. Guide engineering teams on low-level design and security pattern implementation where needed.
• Lead incident response efforts and offer expert guidance during major OT security incidents or breaches.
• Support OT stakeholders in understanding cybersecurity risks, their impact, and drive remediation plans and activities.
• Develop reference architectures, reusable security patterns, use cases, and guidelines to protect sensitive information and safeguard critical infrastructure.
• Stay current on emerging threats and technologies to continuously enhance OT security measures.
• Mentor and guide junior security architects and architecture team members on OT security best practices.

What You’ll Bring

• Technical Expertise: experience across security engineering and architecture within medium to large multi-business organisations. Strong knowledge of security solutions and tools in Operational Technology (OT).
• Cybersecurity Knowledge: Deep understanding of OT and IT systems, including industrial control systems (SCADA, DCS, PLCs).
• Network Security: Skilled in OT network architecture, segmentation, and protocol security.
• Risk Management: Experienced in risk assessments and mitigation strategies for OT environments.
• Communication: Excellent stakeholder engagement and presentation skills; able to simplify complex technical concepts for senior management and delivery teams.
• Problem-Solving: Strong analytical mindset with innovative approaches to complex OT security challenges.
• Project Management: Capable of managing projects, prioritising tasks, and translating business requirements into fit-for-purpose security solutions within time and budget.
• Compliance: Practical application of standards such as ISO/IEC 62443, NIST/AESCSF, and other OT security frameworks.
• Qualifications: Certifications such as CISSP, GICSP, SABSA or equivalent experience desirable.

We'd love to see your applications by Monday 26th January 2026.

At AGL, we offer a wide range of benefits including:

• Flexible working: AGL offers a range of flexible working options including hybrid working and/or flexible hours.
• Staff discounts: Discounted energy, telco and solar plans: Available for employees, family and friends.
• Parental Leave: 20 weeks paid leave for the primary carer plus employer-paid superannuation on unpaid leave.
• Additional Leave: 1 week ‘Recharge Leave’ for eligible employees and salary sacrifice up to 6 weeks additional leave.
• Wellbeing Programs: Partnerships with Medibank and Fitness Passport and on-site health appointments (massage, skin checks etc.).
• AGL Shares: Up to $1000 as part of annual Share Reward plan and salary sacrifice up to $5000 of shares.

*Benefits may change over time and vary based on role type and location.

Inclusion at AGL

At AGL, we value diversity and welcome applicants from various backgrounds, including Aboriginal and/or Torres Strait Islander peoples, individuals with disabilities, culturally diverse individuals, and members of the LGBTQ+ community. AGL is dedicated to maintaining a diverse workforce and encourages applicants to share their lived experiences.
We offer reasonable adjustments throughout the recruitment process and respect the privacy of those who choose not to disclose. To learn more visit: www.agl.com.au/careers

AGL is proud to be a WORK180 Endorsed Employer for All Women.

Our pre-employment screening process includes a Nationally Coordinated Criminal History Check and a medical assessment if necessary.

The information provided as part of your application to AGL will be managed in accordance with the AGL Privacy Policy.

AGL does not accept agency submissions unless approval has been granted by a member of the Talent Acquisition team. Candidates submitted by an agency without approval will not be considered by AGL.

Location

Docklands VIC 3008

Job Family Group

Information Technology - Internet-Based