Security Architect (Engineering & DevSecOps)

Lime Recruitment; Brisbane; Hybrid; AUD 180,000 - 240,000; Full time

Job summary

Lime Recruitment is seeking a Security Architect to embed security across discovery, design, build, release, and operation in Queensland government initiatives. You will translate threats into practical designs, reusable controls, and automated assurance.

You will drive secure-by-design, threat modelling, and risk assessments, advising on IAM, PAM, encryption, and cloud security. A strong background in Azure/AWS and industry frameworks is essential.

Qualifications

• Experience delivering security architecture in complex enterprise or digital transformation programs.
• Strong knowledge of security frameworks, risk assessments, threat modelling, and best practices.

Responsibilities

• Lead solution and platform security architecture across prioritised delivery initiatives.
• Define and guide security patterns, reference implementations, and control frameworks across cloud, infrastructure, applications, networks, data, and identity services.
• Integrate secure-by-design principles into project discovery and refinement phases to define security requirements and acceptance criteria.
• Lead collaborative threat modelling and conduct security risk assessments to mitigate risks.
• Review designs for compliance with security policies, enterprise standards, and regulatory requirements.
• Provide guidance across IAM, PAM, endpoint security, encryption, network security, and cloud security.
• Support security maturity uplift initiatives, including CI/CD security and software supply chain protection.
• Participate in architecture governance and design reviews.

Skills

Security architecture

Threat modelling

CI/CD security

Cloud security

Identity & Access Management

Zero Trust

Regulatory frameworks

Enterprise architecture

Education

CISSP

TOGAF

CCSP

Tools

Azure

AWS

CI/CD tooling

Job description

Security Architect (Engineering & DevSecOps)

Contract to 31/12/2027 with possible extensions | Brisbane, QLD | Hybrid working

Lime Recruitment is currently working with a Queensland Government client to recruit an experienced Security Architect (Engineering & DevSecOps). In this role, you will embed security into the discovery, design, build, release, and operation of technology solutions across prioritised delivery initiatives—translating security requirements and threats into practical designs, reusable engineering controls, and automated assurance.

Key Responsibilities

Lead solution and platform security architecture for prioritised delivery initiatives, remaining active through implementation and verification.

Define, maintain, and guide the adoption of security patterns, reference implementations, and control frameworks across cloud, infrastructure, applications, networks, data, and identity services.

Integrate secure-by-design principles into project discovery and refinement phases to define security requirements, misuse scenarios, acceptance criteria, and prioritised backlog items.

Lead collaborative threat modelling, translate findings into implementable treatments, and conduct security risk assessments to mitigate identified risks.

Review and assure solution designs to ensure compliance with security policies, enterprise architecture standards, and regulatory requirements.

Provide expert guidance across identity & access management (IAM), privileged access management (PAM), endpoint security, encryption, network security, and cloud security.

Support cyber security maturity uplift initiatives, including integrating security controls into CI/CD workflows and protecting the software supply chain.

Contribute to architecture governance forums, design reviews, and technical decision-making processes.

About You

Demonstrated experience taking security architecture from design through implementation and verification within complex enterprise or digital transformation environments.

Strong knowledge of enterprise security architecture frameworks, risk assessments, threat modelling, and industry best practices.

Practical application and API security experience (authentication, authorisation, secrets management, data protection, logging) and tuning security controls in CI/CD pipelines.

Solid understanding of cloud, infrastructure, network, IAM, data protection, security monitoring, and incident response principles.

High-level stakeholder engagement, communication, and facilitation skills, with a proven ability to translate business goals into secure architectural outcomes.

Experience with Azure/AWS security tools, Zero Trust architectures, and frameworks (ISM, Essential Eight, NIST, ISO 27001, QGEA), along with certifications like CISSP, SABSA, TOGAF, or CCSP, is highly desirable.