EL2 Lead Cyber Security Architect

• Initial Contract Duration: Up to 12 months
• Location: QLD, WA, VIC, NSW, SA
• Security Requirements: Must have Baseline
• Working Arrangements: Hybrid
• The Labour Hire Worker is expected to work onsite for the
• first 6 weeks before a hybrid flexible working arrangement can be considered,
• unless otherwise negotiated. A hybrid flexible working arrangement may then be
• considered, ensuring the Labour Hire Worker’s residing address is within
• reasonable travel time and distance of the RFQ location to present onsite in
• cases of emergency or to meet business requirements. The location is the
• capital city of selected state/s.
• Maximum hours: Standard working hours are 40 hours per week.
• Workers may be required to work additional hours, provided the total working
• hours do not exceed a maximum of 80 hours per week.

Job details

• Security Architects design, review, test and assure the
• technical environment, solution designs and solution implementations in
• accordance with current and emerging security best practice. They contribute to
• the technical architecture and security policies and practices.

The role

• provides security architecture and technical direction to ensure solutions,
• platforms and services are secure by design. Operating with substantial
• autonomy in a large, fast-paced environment, the Security Architect translates
• business and functional requirements into secure, integrated ICT solutions. The
• role develops fit-for-purpose architectures, establishes security standards and
• governance, leads security design across the solution lifecycle, resolves
• architectural exceptions, and provides practical advice that enables delivery
• teams to meet commitments while protecting the agency. It applies sound
• judgement to drive innovation, support organisational change and align
• technology outcomes with the agency’s strategic direction.

Key duties and responsibilities

Duties may include some or all of the following

• Translate business and ICT requirements into conceptual,
• logical and end-to-end solution architectures aligned with strategic and
• operational priorities.
• Develop and maintain solution architecture artefacts that
• align with Architecture Review Taskforce (ART) roadmaps, enterprise
• architecture standards and broader technology strategies, ensuring traceability
• between business priorities, planned capabilities and delivery outcomes.
• Consider industry standards and emerging technologies,
• assess capability gaps and recommend solution options that inform technology
• and cyber/security strategy and direction.
• Lead solution analysis, integrate stakeholder input and
• develop architecture artefacts, options and recommendations that support
• executive decision-making.
• Provide technical advice, coordinate architecture activities
• and identify, communicate and resolve complex issues and risks.
• Build and maintain relationships, communicate effectively
• with diverse audiences and negotiate outcomes with internal and external
• stakeholders.
• Build and maintain relationships, communicate effectively
• with diverse audiences and negotiate outcomes with internal and external
• stakeholders.
• Think strategically, identify interdependencies and exercise
• sound judgement in ambiguous environments to develop long-term plans and
• deliver quality outcomes in complex environments.
• Promote innovation, continuous improvement and knowledge
• sharing to strengthen architecture capability across the agency.
• Share knowledge and build capability across the team and key
• APS personnel.
• Technical skills
• Practical knowledge of securing Azure, AWS and on-premises
• environments, including identity and access management, encryption, key
• management and network controls.
• Ability to identify security and architectural gaps,
• collaborate with key stakeholders and recommend clear, risk-based solutions.
• Ability to design secure solution architectures
• incorporating hybrid environments, zero trust, network segmentation and
• secure-by-design principles.
• Strong knowledge of the ACSC Information Security Manual,
• Essential Eight, Protective Security Policy Framework, NIST Cybersecurity
• Framework, ISO/IEC 27001 and applicable privacy requirements.

Knowledge / Qualifications

• Knowledge of cyber/security domain frameworks,
• legislation, policies and procedures
• Understanding of relevant business systems and tools
• Strong communication and negotiation skills
• Professional presentation skills

Essential Criteria

• Demonstrated ability to analyse complex business issues
• within the cyber security domain; deliver pragmatic, risk-based recommendations; influence
• stakeholders; collaborate across multidisciplinary teams; and transfer knowledge
• to APS personnel.

Desirable Criteria

• Knowledge of architecture principles and end-to-end solution
• design, including the integration of cyber security requirements throughout the
• architecture lifecycle.
• Experience applying Australian Government cyber security,
• protective security, resilience and architecture governance frameworks.
• Experience designing secure systems that support critical
• government services, including system and subsystem boundaries, centralised
• monitoring, cyber security technologies and security automation.
• Strong written and verbal communication skills, with
• demonstrated experience presenting clear architectural advice and
• recommendations to senior governance bodies and executive forums.
• Application Deadline: Monday, 09 November 2026
• Expected Start Date: Friday, 01 January 2027
• Job Type: Contract
• Note: If you wish to have a confidential discussion, call us
• on 02 6108 3980 or 0410 756 040 for more information.