Senior Solution Architect (Enterprise Key Management & Secrets Management)

Powerdatagroup; Canberra; Hybrid; AUD 180,000 - 240,000; Full time

Job summary

Powerdatagroup in Canberra, Australia seeks a Senior Solution Architect to lead the design and governance of secure enterprise solutions for EKMS and SMS in a government environment. You will provide architectural leadership across cyber security, cloud, and infrastructure initiatives, aligning to security requirements and governance frameworks.

Optimal candidates will have 10+ years in enterprise architecture, strong stakeholder management, and hands-on experience with Vault, KMS, and PKI.

Qualifications

• 10+ years of leading solution architecture in enterprises.
• Experience with cyber security, cloud, and digital transformation programs.
• Knowledge of EA methodologies and governance.

Responsibilities

• Lead end-to-end architectures for enterprise key management and secrets management.
• Design and govern architecture artefacts, integration patterns and data flows.
• Develop migration strategies from legacy credential frameworks to centralized platforms.
• Support accreditation activities and security documentation.

Skills

Enterprise architecture

Cybersecurity

Cloud architecture

Stakeholder management

Governance

Education

Bachelor's degree or higher in IT or CS

Tools

HashiCorp Vault

AWS KMS

CyberArk

Thales CipherTrust

HSMs

Job description

Senior Solution Architect (Enterprise Key Management & Secrets Management)

Canberra, Australia | Posted on 21/09/2026

Security Clearance:Must have ositive Vetting (PV)

Level:Senior (EL2 Equivalent)

About the Role

We are seeking an experiencedSenior Solution Architectto lead the design, governance, and implementation of secure enterprise solutions supportingEnterprise Key Management Systems (EKMS)andSecrets Management Systems (SMS)within a highly secure government environment.

The successful candidate will provide architectural leadership across complex cyber security, infrastructure, cloud, and enterprise technology initiatives. You will work closely with security architects, project teams, business stakeholders, and technology vendors to design and deliver resilient, scalable, and compliant solutions that protect Australia's most sensitive information assets.

Key Responsibilities

• Lead the development of end-to-end solution architectures for enterprise key management and secrets management capabilities.
  
• Cryptographic key lifecycle management
  
• Secret storage and retrieval
  
• Certificate management and PKI integration
  
• Privileged Access Management (PAM)
  
• Automated key rotation and credential management
  
• Produce and maintain architecture artefacts including:
  
• Security architecture models
  
• Integration patterns
  
• Data flow diagrams
  
• Conduct architecture reviews, technology assessments, and option analyses.
  
• Develop migration strategies from legacy credential and key management frameworks to centralized enterprise platforms.
  
• Design integration patterns for:
  
• Applications
  
• Container platforms
  
• Provide architectural governance through design authorities, review boards, and assurance activities.
  
• Identify and manage architectural risks, dependencies, and technical debt.
  
• Support accreditation and certification activities and prepare associated security documentation.
  
• Contribute to the development of security policies, standards, operational procedures, and technical playbooks.
  
• Mentor engineering teams and provide architectural guidance across projects and enterprise initiatives.
  

Requirements

• Minimum 10 years' experience leading solution architecture activities within large and complex enterprise environments.
  
• Demonstrated experience delivering architecture for cyber security, cloud, infrastructure, or digital transformation programs.
  
• Strong understanding of enterprise architecture methodologies and architecture governance practices.
  

Security & Cryptography

• Experience designing and implementing:
  
• Secrets Management Platforms
  
• Identity and Access Management (IAM)
  
• Public Key Infrastructure (PKI)
  
• Cryptographic security solutions
  
• Privileged Access Management (PAM)
  
• Strong knowledge of key lifecycle management and certificate management processes.
  
• Public cloud services
  
• Expertise in high availability, disaster recovery, resilience, and operational supportability.
  

Security Frameworks & Compliance

• Strong understanding of:
  
• Protective Security Policy Framework (PSPF)
  
• Information Security Manual (ISM)
  
• ASD security requirements
  
• Zero Trust Architecture
  
• Australian Government cyber security standards
  

Stakeholder Management

• Proven ability to engage and influence:
  
• Senior executives
  
• Governance boards
  
• Technical leadership teams
  
• External vendors and delivery partners
  
• Excellent written and verbal communication skills.
  
• Experience working within Defence, Intelligence, National Security, or Federal Government environments.
  
• Experience with technologies such as:
  
• HashiCorp Vault
  
• AWS KMS
  
• CyberArk
  
• Thales CipherTrust
  
• Hardware Security Modules (HSMs)
  
• Experience supporting security accreditation and authority-to-operate activities.
  
• Knowledge of container security, Kubernetes, DevSecOps, and CI/CD security practices.
  

Qualifications

• Bachelor's degree or higher in Information Technology, Cyber Security, Computer Science, Engineering, or related discipline.
  
• Relevant industry certifications highly regarded, including: