Security Solution Architect

RONIN Dynamics; Sydney; On-site; AUD 160,000 - 210,000; Full time

Job summary

RONIN Dynamics is seeking a Security Solution Architect to join a large Australian organisation in Sydney or Melbourne. You will translate strategy into concrete architectures, patterns and standards that engineering teams can build against.

You'll own security domain architectures, run threat modelling and architecture design reviews, and advise across cloud, IAM, Zero Trust, network, and data security. The role reports to the Enterprise Security Architect.

Qualifications

• Experience as a Security Architect in complex enterprise environments.
• Broad cloud security, IAM, Zero Trust, network, app, infra, SIEM.
• Strong Azure and Microsoft 365 security capabilities.
• Threat modelling and architecture review experience.

Responsibilities

• Own security domain architectures, reference architectures, capability roadmaps and technical standards.
• Turn policy and principle into design guardrails, requirements and reusable patterns.
• Run threat modelling, security risk assessments and architecture design reviews on live initiatives.
• Advise across cloud, identity, network, infrastructure, application and data security.
• Work alongside security engineering and cyber defence so the controls land properly instead of living in a document.
• Read the threat and incident picture, then use it to argue for the right architectural investment.

Skills

Security Architect

Cloud security

IAM

Zero Trust

Threat modelling

Architecture reviews

Tools

Azure

Microsoft 365 Security

SIEM

Job description

Security Solution Architect | Sydney OR Melbourne | Permanent

Most security architecture jobs are a Visio licence, a standards library nobody reads, and a standing invite to a governance forum.

This is not that job.

The short version

A large, heavily regulated Australian organisation is building out its architecture function and needs a Security Solution Architect to sit inside it. You report to the Enterprise Security Architect. Your job is to take security strategy off the slide and turn it into architectures, patterns and standards that engineering teams can actually build against.

What you'd actually be doing

• Owning security domain architectures, reference architectures, capability roadmaps and technical standards


• Turning policy and principle into design guardrails, requirements and reusable patterns


• Running threat modelling, security risk assessments and architecture design reviews on live initiatives


• Advising across cloud, identity, network, infrastructure, application and data security


• Working alongside security engineering and cyber defence so the controls land properly instead of living in a document


• Reading the threat and incident picture, then using it to argue for the right architectural investment

What you'll need

• Serious mileage as a Security Architect or Security Solution Architect in complex enterprise environments


• Breadth, not just depth: cloud security, IAM, Zero Trust and network, application security, infrastructure, SIEM and monitoring


• Strong Azure and Microsoft 365 security capability


• Real threat modelling and architecture review experience, not a certification that says you've heard of it


• The ability to explain a control decision to an executive who does not care about controls

Why bother

The security architecture function here is being deliberately built rather than inherited, the roadmap is funded, and the environment is complex enough to be interesting. Getting it wrong has consequences that are not theoretical, which tends to concentrate the mind and speed up decisions.