Security Architect — Cloud, DevSecOps & Automation

BlueScope; Sydney; Hybrid; AUD 140,000 - 190,000; Full time

Job summary

BlueScope is seeking an experienced Security Architect for a 12 month fixed term contract to design, engineer and integrate security solutions across BlueScope’s systems, applications, infrastructure and delivery environments.

Reporting to the IT Manager - Cyber Security Architecture, you will work with enterprise architects, cyber security teams, cloud and platform engineers, project teams, product owners, vendors and business stakeholders to embed secure-by-design principles.

Qualifications

• Minimum 3 years in security architecture capacity.
• Experience with SaaS, cloud, APIs, identity, threat and vulnerability management.
• Hands-on with SIEM, SOAR, EDR, vulnerability scanning and identity governance tooling.

Responsibilities

• Plan, design and govern security architectures across systems, applications, infrastructure, cloud, identity, data, networks, SaaS and API solutions.
• Conduct security assessments, define requirements and remediation approaches for projects and technology changes.
• Develop and maintain security architecture artefacts, reusable patterns, standards, templates and guardrails under version control.
• Maintain security architecture alignment with enterprise architecture, cyber security strategy, standards and legislative obligations.
• Partner with stakeholders to improve security-by-design adoption and remediation outcomes.
• Contribute to BlueScope’s security uplift roadmap, guardrails and continuous improvement of security capability.
• Manage security controls as code using Terraform and Azure DevOps templates, including automated policy validation.
• Embed automated security testing into CI/CD pipelines across application, infrastructure-as-code and containers.
• Integrate security platforms and telemetry, including log onboarding to Microsoft Sentinel.
• Support security engineering across SIEM and SOAR, endpoint detection and response, vulnerability management, identity governance.

Skills

Security architecture

Stakeholder engagement

Automation

DevSecOps

CI/CD

PowerShell

Python

REST APIs

KQL

Education

Tertiary IT degree

Tools

Terraform

Azure DevOps

SIEM

SOAR

Job description

BlueScope is seeking an experienced Security Architect for a 12 month fixed term contract to design, engineer and integrate security solutions across BlueScope’s systems, applications, infrastructure and delivery environments.

Reporting to the IT Manager - Cyber Security Architecture, you will work with enterprise architects, cyber security teams, cloud and platform engineers, project teams, product owners, vendors and business stakeholders to embed secure-by-design principles.