Security Architect: DevSecOps, Cloud & Automation (12-Month)

BlueScope; Melbourne, Sydney, Wollongong City Council; Hybrid; AUD 140,000 - 190,000; Full time

Job summary

BlueScope is seeking an experienced Security Architect for a 12 month fixed term contract to design, engineer and integrate security solutions across BlueScope’s systems, applications, infrastructure and delivery environments.

Based in Melbourne, Sydney or Wollongong with hybrid working and three days per week in the office, you will translate security requirements into automated, secure-by-design controls and work with multiple stakeholders to strengthen our security posture.

Qualifications

• At least three years of experience in a security architecture capacity.
• Proven experience in security threat and risk assessments, policy, architecture and design.
• Security architecture and engineering across SaaS, cloud, APIs, identity, threat and vulnerability management, data protection and network protection.

Responsibilities

• Plan, design and govern security architectures across systems, applications, infrastructure, cloud, identity, data, networks, SaaS and API solutions.
• Conduct security assessments, define requirements and recommend practical risk remediation approaches for projects and technology changes.
• Develop and maintain security architecture artefacts, reusable patterns, standards, templates and guardrails under version control.
• Maintain security architecture alignment with enterprise architecture, cyber security strategy, standards and legislative obligations.
• Partner with technology, cyber security, business, vendor and OT stakeholders to improve security-by-design adoption and remediation outcomes.
• Contribute to BlueScope’s security uplift roadmap, control health reporting and continuous improvement of security capability.
• Manage security controls as code using Terraform and Azure DevOps templates, including automated policy validation and configuration drift detection.
• Embed automated security testing into CI/CD pipelines, including application, dependency, infrastructure-as-code, container and secrets scanning.
• Integrate security platforms and telemetry, including log and event onboarding to Microsoft Sentinel and connections across security, identity, asset management and ITSM platforms.
• Support security engineering across SIEM and SOAR, endpoint detection and response, vulnerability management, identity governance and the broader security toolchain.

Skills

Security architecture

Threat assessment

Risk assessment

SaaS/cloud security

SIEM & SOAR integration

Endpoint detection & response

Vulnerability scanning

Identity governance

DevSecOps

Infrastructure as code

CI/CD security

Git workflows

Secrets management

Kubernetes security

PowerShell or Python

REST APIs

Security telemetry (KQL)

Stakeholder engagement

Communication skills

Problem solving

Certifications (SABSA/CISSP/SANS)

Education

Bachelor's degree in IT / Computer Science or related field

Tools

Terraform

Azure DevOps

Microsoft Sentinel

KQL

Git

Job description

BlueScope is seeking an experienced Security Architect for a 12 month fixed term contract to design, engineer and integrate security solutions across BlueScope’s systems, applications, infrastructure and delivery environments.

Based in Melbourne, Sydney or Wollongong with hybrid working and three days per week in the office, you will translate security requirements into automated, secure-by-design controls and work with multiple stakeholders to strengthen our security posture.