Security Architect

Talent; Canberra; On-site; AUD 170,000 - 210,000; Full time

Job summary

Talent is seeking an experienced M365 Security Architect to deliver secure, enterprise-scale collaboration within a Federal Government environment in Canberra. The role focuses on designing, implementing and strengthening security controls across Microsoft 365, enabling secure external collaboration at the PROTECTED level.

You will lead cyber risk assessments, develop security documentation for accreditation, and provide specialist security architecture expertise across Entra ID, Purview and

Qualifications

• Experience designing secure Microsoft 365 environments for enterprise-scale deployments.
• Proven ability to lead cyber security risk assessments and develop accreditation documentation.
• Strong knowledge of authentication, identity management and external collaboration controls.

Responsibilities

• Develop System Security Plans, Security Risk Management Plans, and Continuous Monitoring Plans to support ATO.
• Lead cyber security risk assessments across Microsoft 365 environments and recommend controls.
• Configure and manage security controls across Microsoft 365, including Purview, Entra ID and Defender.
• Develop security policies, RBAC, Conditional Access and identity management frameworks.

Skills

M365 security

Entra ID

Purview

Defender

Risk assessments

Security documentation

Security architecture

Tools

Microsoft Entra ID

Microsoft Purview

Microsoft Defender

Job description

• Focus: Microsoft 365 Security Architecture | Cloud Security | Identity & Access Management

Position Overview

We are seeking an experienced M365 Security Architect to support the delivery of a secure, enterprise-scale collaboration platform within a complex Federal Government environment.

This role will play a key part in designing, implementing and strengthening security controls across Microsoft 365 environments, enabling secure collaboration with external partners and stakeholders at the PROTECTED classification level.

Working alongside technical, cyber security and assurance teams, you will provide specialist security architecture expertise, lead cyber risk assessments and develop security documentation to support accreditation and ongoing compliance with Australian Government security frameworks.

This opportunity is well suited to a hands‑on Microsoft 365 security specialist who brings strong technical capability across Microsoft Entra ID, Purview, Defender and secure cloud environments.

Key Duties

• Develop comprehensive security documentation, including System Security Plans, Security Risk Management Plans, Continuous Monitoring Plans and Incident Response Plans to support Authority to Operate (ATO).
• Lead technical cyber security risk assessments across Microsoft 365 environments, identifying vulnerabilities and recommending appropriate controls.
• Implement, configure and manage security controls across Microsoft 365, including Microsoft Purview, Entra ID and Microsoft Defender.
• Develop and enforce security policies, role-based access controls (RBAC), Conditional Access and identity management frameworks.
• Ensure security architecture aligns with the ISM, Essential Eight, DSPF, PSPF and ASD's Blueprint for Secure Cloud.
• Provide technical guidance on secure external collaboration, partner onboarding and federated identity management.
• Monitor security events, support incident response activities and drive continuous security improvements.
• Collaborate with cyber security assurance teams and technical stakeholders to achieve security and compliance outcomes.

Skills and Experience Required

The successful candidate will bring strong Microsoft 365 security expertise, supported by practical experience implementing security controls in complex enterprise environments.

Key technical capabilities include:

• Demonstrated experience implementing, securing and hardening Microsoft 365 environments.
• Strong hands‑on knowledge of Microsoft Entra ID, Microsoft Purview and Microsoft Defender.
• Experience developing security policies, Conditional Access, RBAC and Privileged Identity Management (PIM).
• Knowledge of hybrid identity, identity lifecycle management and federated authentication.
• Experience securing external identities, B2B collaboration and guest access.
• Understanding of Microsoft Defender for Cloud Apps (MDCA).
• Experience implementing Data Loss Prevention (DLP), sensitivity labels and data classification controls.
• Knowledge of access reviews, records management, eDiscovery and information governance.
• Experience conducting cyber security risk assessments and preparing security accreditation documentation.
• Understanding of Australian Government security frameworks, including the ISM, Essential Eight, PSPF and DSPF.
• Strong stakeholder engagement skills, with the ability to communicate technical security risks and recommendations clearly.
• A security‑by‑design approach and the ability to contribute effectively within a collaborative delivery team.

An active NV1 security clearance is required for this opportunity.