Senior Solution Architect (Enterprise Key Management & Secrets Management)

PDG Power Data Group; Canberra; On-site; AUD 200,000 - 260,000; Full time

Job summary

PDG Power Data Group is seeking a Senior Solution Architect to lead the design, governance and implementation of secure enterprise solutions for EKMS and SMS within a high‑security government environment.

You will provide architectural leadership across cyber security, cloud, and infrastructure, collaborating with security architects, project teams and vendors to deliver scalable, compliant solutions that protect Australia’s most sensitive information assets.

Qualifications

• Minimum 10 years' experience leading solution architecture in large, complex enterprises.
• Proven track record delivering architecture for cyber security, cloud, infrastructure, or digital transformation programs.
• Strong understanding of enterprise architecture methodologies and governance practices.
• Experience designing and implementing EKMS, SMS, IAM, PKI, and PAM.
• Knowledge of secure architecture, risk management and accreditation processes.

Responsibilities

• Lead end-to-end solution architectures for enterprise key management and secrets management capabilities.
• Cryptographic key lifecycle management.
• Secret storage and retrieval and certificate management integration.
• Privileged Access Management (PAM) integration and key rotation.
• Produce architecture artefacts and integration patterns; conduct reviews and analyses.
• Develop migration strategies from legacy frameworks to centralized platforms.
• Support accreditation activities and security documentation.
• Mentor engineering teams and provide architectural guidance across projects.

Skills

Solution Architecture

Security & Cryptography

Cloud & Infrastructure

Security Frameworks

Stakeholder Management

Education

Bachelor's degree or higher

TOGAF

SABSA

CISSP

CCSP

Azure Solutions Architect Expert

AWS Solutions Architect Professional

Tools

HashiCorp Vault

Azure Key Vault

AWS KMS

CyberArk

Thales CipherTrust

HSMs

Job description

Senior Solution Architect (Enterprise Key Management & Secrets Management)

Security Clearance:Must have ositive Vetting (PV)

Level:Senior (EL2 Equivalent)

About the Role

We are seeking an experiencedSenior Solution Architectto lead the design, governance, and implementation of secure enterprise solutions supportingEnterprise Key Management Systems (EKMS)andSecrets Management Systems (SMS)within a highly secure government environment.

The successful candidate will provide architectural leadership across complex cyber security, infrastructure, cloud, and enterprise technology initiatives. You will work closely with security architects, project teams, business stakeholders, and technology vendors to design and deliver resilient, scalable, and compliant solutions that protect Australia's most sensitive information assets.

Key Responsibilities

• Lead the development of end-to-end solution architectures for enterprise key management and secrets management capabilities.
• Cryptographic key lifecycle management
• Secret storage and retrieval
• Certificate management and PKI integration
• Privileged Access Management (PAM)
• Automated key rotation and credential management
• Produce and maintain architecture artefacts including:
• Security architecture models
• Integration patterns
• Data flow diagrams
• Conduct architecture reviews, technology assessments, and option analyses.
• Develop migration strategies from legacy credential and key management frameworks to centralized enterprise platforms.
• Design integration patterns for:
• Applications
• Container platforms
• Provide architectural governance through design authorities, review boards, and assurance activities.
• Identify and manage architectural risks, dependencies, and technical debt.
• Support accreditation and certification activities and prepare associated security documentation.
• Contribute to the development of security policies, standards, operational procedures, and technical playbooks.
• Mentor engineering teams and provide architectural guidance across projects and enterprise initiatives.

Requirements

Essential Skills & Experience

Solution Architecture

• Minimum 10 years' experience leading solution architecture activities within large and complex enterprise environments.
• Demonstrated experience delivering architecture for cyber security, cloud, infrastructure, or digital transformation programs.
• Strong understanding of enterprise architecture methodologies and architecture governance practices.

Security & Cryptography

• Experience designing and implementing:
• Enterprise Key Management Systems (KMS)
• Secrets Management Platforms
• Identity and Access Management (IAM)
• Public Key Infrastructure (PKI)
• Cryptographic security solutions
• Privileged Access Management (PAM)
• Strong knowledge of key lifecycle management and certificate management processes.

Cloud & Infrastructure

• Experience designing secure solutions across:
• On-premises environments
• Hybrid cloud platforms
• Public cloud services
• Expertise in high availability, disaster recovery, resilience, and operational supportability.

Security Frameworks & Compliance

• Strong understanding of:
• Protective Security Policy Framework (PSPF)
• Information Security Manual (ISM)
• ASD security requirements
• Zero Trust Architecture
• Defence-in-Depth principles
• Australian Government cyber security standards

Stakeholder Management

• Proven ability to engage and influence:
• Senior executives
• Governance boards
• Technical leadership teams
• External vendors and delivery partners
• Excellent written and verbal communication skills.

Desirable Experience

• Experience working within Defence, Intelligence, National Security, or Federal Government environments.
• Experience with technologies such as:
• HashiCorp Vault
• Azure Key Vault
• AWS KMS
• CyberArk
• Thales CipherTrust
• Hardware Security Modules (HSMs)
• Experience supporting security accreditation and authority-to-operate activities.
• Knowledge of container security, Kubernetes, DevSecOps, and CI/CD security practices.

Qualifications

• Bachelor's degree or higher in Information Technology, Cyber Security, Computer Science, Engineering, or related discipline.
• Relevant industry certifications highly regarded, including:
• TOGAF
• SABSA
• CISSP
• CCSP
• Azure Solutions Architect Expert
• AWS Solutions Architect Professional