Security Architect

Talent Corp; Canberra; Sur place; AUD 140 000 - 180 000; Plein temps

Résumé du poste

Talent Corp is seeking an experienced M365 Security Architect to support secure, enterprise-grade collaboration within a Federal Government environment in Canberra. The role focuses on designing and implementing controls across Microsoft 365, enabling secure external collaboration at the PROTECTED level.

You will lead risk assessments, develop accreditation documentation, and provide security architecture guidance within a cross-functional delivery team.

Qualifications

• Experience implementing security controls in complex enterprise environments.
• Strong Microsoft 365 security expertise across Entra ID, Purview and Defender.
• Knowledge of security frameworks (ISM, Essential Eight, PSPF, DSPF) and accreditation processes.

Responsabilités

• Develop and maintain System Security Plans, Security Risk Management Plans, and Continuous Monitoring Plans for ATO.
• Lead cyber security risk assessments across Microsoft 365 environments.
• Implement, configure and manage security controls across Microsoft 365 (Purview, Entra ID, Defender).
• Develop security policies, RBAC and identity management frameworks.
• Ensure security architecture aligns with Australian Government frameworks and cloud security best practices.
• Provide guidance on secure external collaboration and federated identity management.
• Monitor security events and support incident response activities.
• Collaborate with assurance teams to achieve compliance outcomes.

Connaissances

Microsoft 365 security

RBAC & PIM

Conditional Access

Federated identity

External collaboration

Threat monitoring

Security architecture

Security-by-design

Outils

Microsoft Entra ID

Microsoft Purview

Microsoft Defender

Description du poste

• Focus: Microsoft 365 Security Architecture | Cloud Security | Identity & Access Management

M365 Security Architect - NV1 Cleared

• Contract: November 2026 - June 2027
• Security Clearance: Active NV1 required
• Focus: Microsoft 365 Security Architecture | Cloud Security | Identity & Access Management

Position Overview

We are seeking an experienced M365 Security Architect to support the delivery of a secure, enterprise-scale collaboration platform within a complex Federal Government environment.

This role will play a key part in designing, implementing and strengthening security controls across Microsoft 365 environments, enabling secure collaboration with external partners and stakeholders at the PROTECTED classification level.

Working alongside technical, cyber security and assurance teams, you will provide specialist security architecture expertise, lead cyber risk assessments and develop security documentation to support accreditation and ongoing compliance with Australian Government security frameworks.

This opportunity is well suited to a hands-on Microsoft 365 security specialist who brings strong technical capability across Microsoft Entra ID, Purview, Defender and secure cloud environments.

Key Duties

• Develop comprehensive security documentation, including System Security Plans, Security Risk Management Plans, Continuous Monitoring Plans and Incident Response Plans to support Authority to Operate (ATO).
• Lead technical cyber security risk assessments across Microsoft 365 environments, identifying vulnerabilities and recommending appropriate controls.
• Implement, configure and manage security controls across Microsoft 365, including Microsoft Purview, Entra ID and Microsoft Defender.
• Develop and enforce security policies, role-based access controls (RBAC), Conditional Access and identity management frameworks.
• Ensure security architecture aligns with the ISM, Essential Eight, DSPF, PSPF and ASD's Blueprint for Secure Cloud.
• Provide technical guidance on secure external collaboration, partner onboarding and federated identity management.
• Monitor security events, support incident response activities and drive continuous security improvements.
• Collaborate with cyber security assurance teams and technical stakeholders to achieve security and compliance outcomes.

Skills and Experience Required

The successful candidate will bring strong Microsoft 365 security expertise, supported by practical experience implementing security controls in complex enterprise environments.

Key technical capabilities include

• Demonstrated experience implementing, securing and hardening Microsoft 365 environments.
• Strong hands-on knowledge of Microsoft Entra ID, Microsoft Purview and Microsoft Defender.
• Experience developing security policies, Conditional Access, RBAC and Privileged Identity Management (PIM).
• Knowledge of hybrid identity, identity lifecycle management and federated authentication.
• Experience securing external identities, B2B collaboration and guest access.
• Understanding of Microsoft Defender for Cloud Apps (MDCA).
• Experience implementing Data Loss Prevention (DLP), sensitivity labels and data classification controls.
• Knowledge of access reviews, records management, eDiscovery and information governance.
• Experience conducting cyber security risk assessments and preparing security accreditation documentation.
• Understanding of Australian Government security frameworks, including the ISM, Essential Eight, PSPF and DSPF.
• Strong stakeholder engagement skills, with the ability to communicate technical security risks and recommendations clearly.
• A security-by-design approach and the ability to contribute effectively within a collaborative delivery team.

An active NV1 security clearance is required for this opportunity.