Job Title: Security Architect

Security Clearance: Must be able to obtain Negative Vetting Level 1 (NV1)

Duration: Initial 9 months with 2 x 12-month extensions

Industry: Information and Communications Technology (ICT)

Functional Expertise: Cyber Security Architecture

Sub-functional Expertise: Enterprise Security Architecture, Cloud Security, Security Assurance and Accreditation

Location of work: Canberra, ACT

Working arrangements: Hybrid. Candidates are required to work primarily onsite from the Canberra office. Remote work of up to two days per week may be negotiated after six months, subject to approval and applicable home-based work arrangements.

Closing date: 9AM Wednesday, 2 September 2026

Description:

Our client is seeking an experienced Security Architect to design, build and oversee security infrastructure, ensuring systems are resilient against threats. The role will provide security architecture leadership across enterprise ICT solutions, with a strong focus on Microsoft Azure, security assurance, accreditation, governance and compliance.

The successful candidate will have extensive experience delivering enterprise security architecture and cyber security outcomes within large and complex government or regulated environments. The role requires expertise in Australian Government security requirements, cloud security architecture, security operations integration, DevSecOps and stakeholder engagement.

Responsibilities:

• Support the definition of effective ICT security capabilities and solutions to meet capability and business requirements.
• Ensure solutions are fit for purpose from a security perspective and meet relevant security policies, accreditation frameworks and partner compliance requirements.
• Collaborate with enterprise solution and system architects, business stakeholders and delivery teams to drive holistic technology implementation.
• Support architecture strategies covering technology selection, system and solution architecture, development and deployment infrastructure, inter-program collaboration and implementation.
• Design and support implementation of security capabilities including federated Identity and Access Management, gateways and firewalls, Security Information and Event Management (SIEM), intrusion detection and prevention, threat and virus analysis, and encryption at rest and in transit on Azure Cloud.
• Coordinate security accreditation activities and develop key security documentation, including SSP Annex, SSP, SRMP and SOPS.
• Identify and communicate security risks and drivers to stakeholders.
• Identify technology solutions and development initiatives while maintaining a high-level, holistic view of security capabilities.
• Provide leadership to development and business specialists in delivering key security outcomes.
• Design and execute the transition of security management into service.
• Design and document security architecture components within the Technical Security Design.
• Deliver Security Architecture artefacts in accordance with applicable security accreditation frameworks.
• Provide advice supporting architectural decisions relating to technology selection, scope and security solution design.
• Manage architectural security risks, program security risks and security accreditation processes.
• Ensure alignment with enterprise security standards and strategies.

Requirements:

• Demonstrated experience designing and overseeing enterprise-wide ICT security solutions in a multi-agency environment.
• Ability to define programs of work that achieve tangible and measurable business benefits.
• Experience ensuring solutions meet applicable security policies and compliance requirements, including ISM and IRAP.
• Demonstrated ability to develop and manage security architecture technical designs.
• Experience engaging with enterprise security capabilities, including SIEM and SOC.
• Experience designing and supporting security capabilities using Scaled Agile and DevOps methodologies.
• Ability to obtain the required organisational suitability assessment prior to commencement.
• Hold or be willing to obtain an Australian Government NV1 security clearance.
• Ability to comply with applicable confidentiality and non-disclosure requirements prior to commencement.

Key Capabilities:

• Enterprise security architecture and cyber security.
• Microsoft Azure cloud security architecture.
• Protective security, security assurance and compliance.
• Security architecture design and governance.
• Zero Trust and defence-in-depth architecture.
• Security operations integration, including SOC, SIEM and SOAR.
• Threat detection, monitoring, incident response and vulnerability management.
• Agile, DevSecOps and Infrastructure-as-Code security practices.
• Automated security assurance, secure CI/CD, policy-as-code and cloud security guardrails.
• Senior stakeholder engagement and communication.

Essential Criteria:

• Demonstrated cyber security architecture experience
  • Minimum 8 years' experience delivering enterprise security architecture and cyber security outcomes in large and complex government or regulated environments.
  • Demonstrated ability to lead the design, assurance, and implementation of enterprise-wide ICT security solutions, including development of security roadmaps, architectural standards, and strategic security programs that deliver measurable business outcomes.
  • Minimum 5 years' experience in cloud security architecture, including at least 3 years designing and governing security architectures within Microsoft Azure.
  • Demonstrated experience designing enterprise-scale Azure environments, including hybrid cloud, multi-environment, and Protected-classification deployments.
• Protective Security and Compliance
  • Demonstrated experience designing and assuring solutions that meet Australian Government security requirements, including:
    • Information Security Manual (ISM).
    • Protective Security Policy Framework (PSPF).
    • IRAP assessment and accreditation processes.
    • Security accreditation requirements for Protected systems.
    • Security requirements associated with Systems of Government Significance and critical business systems.
  • Ability to translate security and compliance requirements into practical architecture patterns, controls, and implementation guidance.
• Security Architecture Design and Governance
  • Demonstrated ability to develop, maintain, and govern security architecture artefacts including:
    • Target and transitional security architectures.
    • Security design documentation.
    • Security patterns and standards.
    • Threat models and risk assessments.
    • Architecture decision records and security exceptions.
  • Demonstrated experience designing secure solutions using Azure security capabilities including:
    • Microsoft Entra ID.
    • Privileged Identity Management (PIM).
    • Conditional Access.
    • Azure Firewall.
    • Private Endpoints.
    • Key Vault.
    • Microsoft Defender for Cloud.
  • Ability to apply Zero Trust principles and defence-in-depth strategies across cloud platforms.
• Security Operations Integration
  • Experience integrating security architecture with enterprise security capabilities, including Security Operations Centres (SOC), SIEM, SOAR, threat detection, monitoring, incident response, and vulnerability management functions.
• DevSecOps and Secure Delivery
  • Demonstrated experience embedding security controls within Agile, DevSecOps and Infrastructure-as-Code delivery practices.
  • Experience implementing automated security assurance, secure CI/CD pipelines, policy-as-code, and cloud security guardrails.
• Stakeholder Engagement and Communication
  • Proven ability to engage effectively with senior executives, enterprise architects, program delivery teams, vendors, security assessors, and operational stakeholders.
  • Strong written and verbal communication skills, including the ability to present complex security concepts and risks to both technical and non-technical audiences.

Desirable Criteria:

• Relevant industry and Microsoft certifications, such as:
  • Microsoft Certified: Cybersecurity Architect Expert (SC-100).
  • Microsoft Certified: Azure Security Engineer Associate (AZ-500).
  • Microsoft Certified: Azure Solutions Architect Expert (AZ-305).
  • CISSP/CCSP/CISM etc.
• Experience with architecture frameworks and methodologies, including: TOGAF/SABSA/AGAF/NEAF etc.
• Experience supporting IRAP assessments, security accreditation activities, and authority-to-operate (ATO) processes.
• Knowledge of contemporary security frameworks including Zero Trust, NIST Cybersecurity Framework, Essential Eight, and CIS Controls.

How to apply:

Please submit your application including your resume and a completed application form addressing the essential and desirable criteria. Ensure your application highlights your experience and any relevant certifications.

Job Title: ICT Project Officer

Security Clearance: Baseline

Duration: Initial 3 months with 1 x 3-month extension

Industry: Information Technology

Functional Expertise: ICT

Sub-functional Expertise: ICT Support

Location of work: Barton, ACT

Working arrangements: 100% office-based

Closing date: 9AM Friday, 28 August 2026

Description:

Our client is seeking an ICT Project Officer to provide frontline ICT support services to staff in Australia and overseas. The role is responsible for responding to helpdesk requests, resolving routine ICT issues, maintaining accurate service records, and supporting the deployment and management of ICT equipment.

The position contributes to the delivery of reliable and customer-focused ICT services while supporting broader ICT projects and operational activities. The role requires strong communication skills, sound problem-solving abilities and a commitment to delivering high-quality customer service.

Responsibilities:

• Provide ICT support for hardware, software, network, account and device issues.
• Triage, resolve and escalate service requests and incidents in line with service levels.
• Administer user accounts, systems, devices, software and ICT asset records.
• Support ICT projects, upgrades, testing, rollouts and implementation activities.
• Prepare and update ICT procedures, user guides and knowledge articles.
• Liaise with staff, vendors and service providers to support ICT service delivery.
• Identify recurring issues and contribute to service and process improvements.
• Support cyber security controls, patching, access management and incident reporting.
• Maintain user and building ICT hardware in a 100% office-based environment.

Requirements:

• Current minimum Baseline is essential.
• Demonstrated experience providing responsive ICT support in the Australian Public Service, troubleshooting technical issues, supporting users, maintaining ICT systems and contributing to reliable service delivery in a Microsoft on-prem & cloud environment.
• Demonstrated ability to analyse ICT issues, apply sound judgement, identify risks, develop practical solutions, and make recommendations that improve systems, processes, or user outcomes.
• Demonstrated ability to communicate clearly with technical and non-technical stakeholders, providing advice and supporting users with ICT issues.
• Demonstrated ability to manage competing priorities, monitor progress, meet deadlines, support ICT projects or operational tasks, and deliver quality outcomes in a busy service environment.
• Demonstrated ability to work collaboratively, support team capability, act with professionalism and integrity, follow ICT security and governance requirements, and contribute positively to APS workplace culture.

Key Capabilities:

• Frontline ICT support and troubleshooting.
• Hardware, software, network, account and device support.
• Microsoft on-premises and cloud environments.
• ICT service request and incident management.
• User, device, software and ICT asset administration.
• ICT project, upgrade, testing and rollout support.
• Cyber security controls, patching and access management.
• Stakeholder communication and customer service.
• Problem-solving and service improvement.

Essential Criteria:

• Demonstrated experience providing responsive ICT support in the Australian Public Service, troubleshooting technical issues, supporting users, maintaining ICT systems and contributing to reliable service delivery in a Microsoft on-prem & cloud environment.
• Demonstrated ability to analyse ICT issues, apply sound judgement, identify risks, develop practical solutions, and make recommendations that improve systems, processes, or user outcomes.
• Demonstrated ability to communicate clearly with technical and non-technical stakeholders, providing advice and supporting users with ICT issues.
• Demonstrated ability to manage competing priorities, monitor progress, meet deadlines, support ICT projects or operational tasks, and deliver quality outcomes in a busy service environment.
• Demonstrated ability to work collaboratively, support team capability, act with professionalism and integrity, follow ICT security and governance requirements, and contribute positively to APS workplace culture.

Desirable Criteria:

• Experience in Active Directory on premise and Azure AD
• Demonstrated understanding of ITIL principles

How to apply:

Please submit your application including your resume and a completed application form addressing the essential and desirable criteria. Ensure your application highlights your experience and any relevant certifications.

Job Title: Manager Project Manager – EL1

Security Clearance: Negative Vetting Level 1 (NV1)

Duration: Initial 12 months with 1 x 12-month extension

Industry: Information Technology

Functional Expertise: Project Management

Sub-functional Expertise: Cyber Security Project Management

Location of work: ACT

Working arrangements: Full-time onsite. Temporary work-from-home arrangements may be considered on a case-by-case basis. Extended hours and weekend work are required during key event periods.

Closing date: 9AM Friday, 28 August 2026

Description:

Our client is seeking an experienced Manager Project Manager at the EL1 level to support cyber security resilience activities and associated project delivery. The role will manage project governance, assurance and readiness activities while coordinating stakeholders, resources, risks, budgets and schedules to achieve required outcomes.

During key event periods, the successful candidate will also support event-specific requirements, including extended hours and weekend work where required.

Responsibilities:

• Project governance and reporting as required by the project board operating under the PRINCE2 framework
• Coordinate assurance testing and readiness activities for key systems and underlying infrastructure, including security/IRAP assessments, penetration testing coordination, reporting and documentation
• Manage project risks, issues, budget and schedule
• Implement effective change control
• Coordinate staff to meet project timeframes
• Communicate with internal and external stakeholders
• Liaise with business and technical areas to facilitate the timely resolution of issues as they arise
• Produce technical and non-technical documentation as required
• Manage project resources effectively to deliver the required outcomes
• Undertake other duties as required

Requirements:

• Must hold a Negative Vetting Level 1 (NV1) security clearance
• Ability to work full-time onsite in the ACT
• Ability to undertake extended hours and weekend work during key event periods
• Ability to support project governance and reporting under the PRINCE2 framework
• Experience coordinating assurance testing and readiness activities

Key Capabilities:

• Project governance and reporting
• Cyber security project management
• Security and IRAP assessment coordination
• Penetration testing coordination
• Risk, issue, budget and schedule management
• Change control
• Stakeholder management
• Technical and non-technical documentation
• Project resource management

Essential Criteria:

• Demonstrated experience delivering projects on time
• Experience managing internal and external stakeholders
• Demonstrated written and verbal communication skills
• Demonstrated experience managing projects in a cyber security domain

Desirable Criteria:

• Minimum 10 years’ experience delivering projects

How to apply:

Please submit your application including your resume and a completed application form addressing the essential and desirable criteria. Ensure your application highlights your experience and any relevant certifications.

Job Title: Senior Cyber Security Governance Analyst

Security Clearance: Negative Vetting Level 1 (NV1)

Duration: Initial 12 months with 1 x 12-month extension

Industry: Information Technology

Functional Expertise: Governance, Risk & Compliance (GRC)

Location of work: ACT

Working arrangements: Onsite

Closing date: 9AM Friday, 28 August 2026

Description:

Our client is seeking a Senior Cyber Security Governance Analyst to support cyber security Governance, Risk and Compliance (GRC) activities. The role will contribute to security considerations, assurance processes and the development of security documentation, while supporting additional requirements as required.

Responsibilities:

• Contributing to solution design for security considerations.
• Review and provide recommendations to develop security requirements.
• Develop communications and documentation for senior executive decision making.
• Support the coordination of security assurance processes including IRAP and penetration testing.
• Lead the development of formal security documentation.

Requirements:

• Must hold a Negative Vetting Level 1 (NV1) security clearance.
• Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight.
• Demonstrated experience and capability performing a cyber security GRC role.
• Demonstrated experience managing stakeholder or client interactions to achieve an outcome.
• Demonstrated experience in developing GRC documentation.

Key Capabilities:

• Cyber security Governance, Risk and Compliance (GRC).
• Security requirements development and review.
• Security assurance processes.
• IRAP and penetration testing coordination.
• Development of formal security documentation.
• Senior executive communications and documentation.
• Stakeholder and client interaction.

Essential Criteria:

• Knowledge of the Information Security Manual, Protective Security Policy Framework and Essential Eight
• Demonstrated experience and capability performing a cyber security GRC role.
• Demonstrated experience managing stakeholder or client interactions to achieve an outcome.
• Demonstrated experience in developing GRC documentation

Desirable Criteria:

• Minimum 5 years’ experience in related roles

How to apply:

Please submit your application including your resume and a completed application form addressing the essential and desirable criteria. Ensure your application highlights your experience and any relevant certifications.

Job Title: Software Engineer/Developer

Security Clearance: Must have TSPV

Duration: Fulltime Permanent role

Industry: Information Technology

Functional Expertise: Software Engineering

Sub-functional Expertise: Application Development

Location of work: Scoresby, VIC, Australia

Working arrangements: Onsite

Closing date: 9AM Thursday, 23 October 2025

Description:

Our client is seeking Software Engineers/ Developers to support a range of classified programs within a secure environment. These full-time permanent role is based in Scoresby, VIC and involve working with mission-critical systems that span multiple areas of software engineering. You’ll join a collaborative and cross-functional team that values innovation and continuous improvement.

Responsibilities:

• Design and develop innovative software solutions to complex challenges

• Collaborate across functional and domain boundaries to deliver compelling outcomes

• Lead or participate in agile activities such as story mapping and estimation

• Integrate and deploy complex systems using SecDevOps methodologies

• Undertake UI/UX development and refinement

• Research and prototype emerging technologies

• Contribute to or lead customer engagements, demonstrations, and innovation initiatives

Requirements:

• Bachelor's Degree in Software Engineering, Computer Science, or Electrical Engineering (with relevant software engineering experience)

• Experience integrating with external systems/applications (REST API, JSON/XML)

• Familiarity with open-source technologies such as NiFi, Kafka, Elastic (ELK) Stack, and Solr

• Proficiency with CI/CD tools and Infrastructure as Code (e.g. Ansible, Jenkins, Git)

• Strong Java development skills and experience with related frameworks

• Experience with containerisation tools such as Docker and Kubernetes

• Proficiency using Atlassian tools including JIRA and Confluence

Key Capabilities:

• Software design and development

• Agile methodologies and estimation

• DevOps and SecDevOps integration

• UI/UX development

• Containerisation and automation

• Cross-functional collaboration

• Innovation and technical prototyping

Essential Criteria:

• Please provide a cover letter supporting your suitability for this role.

How to apply:

Please submit your application including your resume and a completed application form addressing the essential and desirable criteria. Ensure your application highlights your experience and any relevant certifications.

Job Title: Scrum Master

Security Clearance: Must have TSPV

Duration: Fulltime Permanent role

Industry: Information Technology

Functional Expertise: Agile Delivery

Sub-functional Expertise: Scrum Mastery

Location of work: Canberra, ACT

Working arrangements: Onsite

Closing date: 9AM Thursday, 23 October 2025

Description:

Our client is seeking an experienced Agile Scrum Master to join a small, collaborative team operating in a secure environment. This is a full-time permanent opportunity based on-site in Canberra, working closely with both the product development team and customer product owners. The role will involve maintaining team performance, facilitating Agile ceremonies, and helping foster a culture of continuous improvement.

Responsibilities:

• Facilitate and coordinate Scrum ceremonies including daily stand-ups, sprint planning, sprint reviews, and retrospectives

• Identify and remove obstacles impacting team performance

• Communicate project development status, risks, and issues to relevant stakeholders

• Monitor key performance indicators (KPIs) to support timely and quality delivery

• Ensure adherence to the Scrum framework and Agile principles

• Coach and mentor team members to support continuous improvement

Requirements:

• Certification in Agile methodologies (Certified Scrum Master or Professional Scrum Master)

• Strong collaboration and interpersonal skills for cross-functional teamwork

• Experience using Atlassian JIRA and Confluence

Key Capabilities:

• Agile project management

• Stakeholder communication

• Problem solving and impediment resolution

• Team coaching and mentoring

• Performance tracking and reporting

Essential Criteria:

• Please provide a cover letter supporting your suitability for this role.

How to apply:

Please submit your application including your resume and a completed application form addressing the essential and desirable criteria. Ensure your application highlights your experience and any relevant certifications.