EL2 Lead Cyber Security Architect

• Initial Contract Duration: Up to 12 months
  
• Location: QLD, WA, VIC, NSW, SA
  
• Security Requirements: Must have Baseline
  
• Working Arrangements: Hybrid
  
• The Labour Hire Worker is expected to work onsite for the first 6 weeks before a hybrid flexible working arrangement can be considered, unless otherwise negotiated. A hybrid flexible working arrangement may then be considered, ensuring the Labour Hire Worker’s residing address is within reasonable travel time and distance of the RFQ location to present onsite in cases of emergency or to meet business requirements. The location is the capital city of selected state/s.
  
• Maximum hours: Standard working hours are 40 hours per week. Workers may be required to work additional hours, provided the total working hours do not exceed a maximum of 80 hours per week.
  

Job details

Security Architects design, review, test and assure the technical environment, solution designs and solution implementations in accordance with current and emerging security best practice. They contribute to the technical architecture and security policies and practices.

Key duties and responsibilities

Duties may include some or all of the following:

• Translate business and ICT requirements into conceptual, logical and end-to-end solution architectures aligned with strategic and operational priorities.
  
• Develop and maintain solution architecture artefacts that align with Architecture Review Taskforce (ART) roadmaps, enterprise architecture standards and broader technology strategies, ensuring traceability between business priorities, planned capabilities and delivery outcomes.
  
• Consider industry standards and emerging technologies, assess capability gaps and recommend solution options that inform technology and cyber/security strategy and direction.
  
• Lead solution analysis, integrate stakeholder input and develop architecture artefacts, options and recommendations that support executive decision-making.
  
• Provide technical advice, coordinate architecture activities and identify, communicate and resolve complex issues and risks.
  
• Build and maintain relationships, communicate effectively with diverse audiences and negotiate outcomes with internal and external stakeholders.
  
• Build and maintain relationships, communicate effectively with diverse audiences and negotiate outcomes with internal and external stakeholders.
  
• Think strategically, identify interdependencies and exercise sound judgement in ambiguous environments to develop long-term plans and deliver quality outcomes in complex environments.
  
• Promote innovation, continuous improvement and knowledge sharing to strengthen architecture capability across the agency.
  
• Share knowledge and build capability across the team and key APS personnel.
  

Technical skills

• Practical knowledge of securing Azure, AWS and on-premises environments, including identity and access management, encryption, key management and network controls.
  
• Ability to identify security and architectural gaps, collaborate with key stakeholders and recommend clear, risk-based solutions.
  
• Ability to design secure solution architectures incorporating hybrid environments, zero trust, network segmentation and secure-by-design principles.
  
• Strong knowledge of the ACSC Information Security Manual, Essential Eight, Protective Security Policy Framework, NIST Cybersecurity Framework, ISO/IEC 27001 and applicable privacy requirements.
  

Knowledge / Qualifications:

• Knowledge of cyber/security domain frameworks, legislation, policies and procedures
  
• Understanding of relevant business systems and tools
  
• Strong communication and negotiation skills
  
• Professional presentation skills
  

• Demonstrated ability to analyse complex business issues within the cyber security domain;deliver pragmatic, risk-based recommendations; influence stakeholders; collaborate acrossmultidisciplinary teams; and transfer knowledge to APS personnel.
  

Desirable Criteria

• Knowledge of architecture principles and end-to-end solution design, including the integration of cyber security requirements throughout the architecture lifecycle.
  
• Experience applying Australian Government cyber security, protective security, resilience and architecture governance frameworks.
  
• Experience designing secure systems that support critical government services, including system and subsystem boundaries, centralised monitoring, cyber security technologies and security automation.
  
• Strong written and verbal communication skills, with demonstrated experience presenting clear architectural advice and recommendations to senior governance bodies and executive forums.
  

Note: If you wish to have a confidential discussion, call us on 02 6108 3980 or 0410 756 040 for more information.