Security Architect

Talent; Canberra; Hybrid; AUD 180,000 - 240,000; Full time

Job summary

Talent is seeking an experienced Security Architect to support a Federal Government program delivering secure ICT capabilities. The role focuses on Microsoft Azure, enterprise security, accreditation and Australian Government requirements.

You will work with solution architects, delivery teams and security specialists to embed security across design, development and transition, aligning with ISA frameworks and PROTECTED-class deployments.

Qualifications

• Minimum 8 years' experience delivering enterprise security architecture in large or regulated environments.
• Minimum 5 years' experience in cloud security architecture, including 3 years in Microsoft Azure.
• Experience designing enterprise-scale Azure environments, including hybrid and PROTECTED deployments.
• Strong knowledge of ISM, PSPF, IRAP security accreditation processes.
• Experience embedding security within Agile and DevSecOps environments.

Responsibilities

• Design and oversee the implementation of enterprise-wide ICT security solutions.
• Develop and maintain security architecture, technical designs, standards and roadmaps.
• Design security capabilities across Microsoft Azure, including hybrid and PROTECTED environments.
• Coordinate security accreditation activities and develop supporting documentation.
• Embed security controls within Agile, DevSecOps, IaC and CI/CD delivery practices.

Skills

Azure security

Security architecture

Stakeholder engagement

DevSecOps

Security governance

Threat modelling

Zero Trust

CI/CD security

Tools

Microsoft Entra ID

Privileged Identity Management (PIM)

Conditional Access

Azure Firewall

Private Endpoints

Key Vault

Defender for Cloud

SIEM

SOAR

Job description

• Canberra, ACT - primarily onsite with hybrid arrangements available
• Contract until 30 June 2027 + 2 x 12-month extension options
• NV1 clearance required

Position Overview

An opportunity is available for an experienced Security Architect to support a significant Federal Government technology program delivering secure, resilient and enterprise-scale ICT capabilities.

The Security Architect will play a key role in defining, designing and overseeing security architecture across the program, with a strong focus on Microsoft Azure, enterprise security, security accreditation and Australian Government security requirements. Working closely with solution and system architects, delivery teams, security specialists and senior stakeholders, you will help ensure security is embedded throughout the design, development and transition of critical technology capabilities.

Key Duties

• Design and oversee the implementation of enterprise-wide ICT security solutions.
• Develop and maintain security architecture, technical designs, security patterns, standards and roadmaps.
• Design and support security capabilities across Microsoft Azure, including hybrid and PROTECTED environments.
• Ensure solutions align with ISM, PSPF, IRAP and relevant security accreditation requirements.
• Design security capabilities covering identity and access management, gateways, firewalls, SIEM, intrusion detection and prevention, threat analysis and encryption.
• Integrate security architecture with enterprise SOC, SIEM, SOAR, monitoring, incident response and vulnerability management capabilities.
• Apply Zero Trust and defence-in-depth principles across cloud environments.
• Embed security controls within Agile, DevSecOps, Infrastructure-as-Code and CI/CD delivery practices.
• Coordinate security accreditation activities and develop supporting security documentation and architecture artefacts.
• Identify and manage architectural and program security risks.
• Provide security architecture advice to support technology selection, solution design and implementation decisions.
• Work collaboratively with senior stakeholders, enterprise architects, delivery teams, vendors and security assessors.
• Support the transition of security capabilities into operational service.

Skills and Experience Required

• Minimum 8 years' experience delivering enterprise security architecture and cyber security outcomes within large and complex government or regulated environments.
• Demonstrated experience leading the design, assurance and implementation of enterprise-wide ICT security solutions.
• Experience developing security roadmaps, architecture standards and strategic security programs.
• Minimum 5 years' experience in cloud security architecture, including at least 3 years designing and governing security architecture within Microsoft Azure.
• Demonstrated experience designing enterprise-scale Azure environments, including hybrid cloud, multi-environment and PROTECTED-classification deployments.
• Strong knowledge and practical experience with ISM, PSPF, IRAP assessment and security accreditation processes.
• Experience translating security and compliance requirements into practical architecture patterns, controls and implementation guidance.
• Strong Azure security capability, including experience with Microsoft Entra ID, Privileged Identity Management (PIM), Conditional Access, Azure Firewall, Private Endpoints, Key Vault and Microsoft Defender for Cloud.
• Experience developing and governing security architecture artefacts, including target and transitional architectures, technical security designs, threat models, risk assessments, architecture decisions and security exceptions.
• Experience integrating security architecture with SOC, SIEM, SOAR, threat detection, monitoring, incident response and vulnerability management.
• Experience embedding security within Agile and DevSecOps environments, including secure CI/CD, automated security assurance, policy-as-code and cloud security guardrails.
• Strong stakeholder engagement and communication skills, with the ability to communicate complex security risks and concepts to technical and non-technical audiences.
• Relevant Microsoft or security certifications such as SC-100, AZ-500, AZ-305, CISSP, CCSP or CISM will be highly regarded.
• Experience with architecture frameworks such as TOGAF, SABSA, AGAF or NEAF will be highly regarded.
• Knowledge of Zero Trust, Essential Eight, NIST Cybersecurity Framework and CIS Controls will be highly regarded.