Security Architect (Geelong)

Employment type — full-time/contract Role Overview We are seeking an experienced Security Architect to design, implement, and govern enterprise-wide security solutions across our technology landscape. The ideal candidate will bring deep expertise across multiple security domains and will play a pivotal role in safeguarding our digital assets, enabling secure business transformation, and ensuring compliance with industry standards. Experience Required 12 – 15 years of progressive experience in information security, with a strong background in security architecture and solution design. Key Responsibilities
- Design and architect end-to-end security solutions aligned with business objectives and enterprise architecture principles.
- Own the security architecture for 3–5 concurrent enterprise programs, delivering HLDs/LLDs, threat models, and architecture decision records.
- Define and enforce security standards, frameworks, and best practices across projects and platforms.
- Creating reference architectures, security patterns, and reusable blueprints.
- Partner with project teams, application owners, and infrastructure teams to ensure security-by-design and compliance with organizational policies.
- Lead security assessments, threat modeling, and risk analysis for new and existing solutions.
- Architect solutions for legacy system transformations , ensuring secure modernization and migration.
- Evaluate emerging security technologies and recommend adoption strategies.
- Provide technical leadership, mentoring, and guidance to engineering and operations teams.
- Supporting internal/external audits and customer security assessments Core Technical Skills Identity & Access Management (IAM)
- Strong expertise in IAM principles, SSO, MFA, privileged access management, and role-based access control.
- Hands-on experience with Azure Active Directory (Entra ID) , conditional access, and identity governance. Data / Information Security
- Data classification and labelling, Data Loss Prevention (DLP), encryption (at-rest and in-transit), tokenization, and data masking.
- Security posture management (CSPM/DSPM) and data governance frameworks. Application Security
- SAST, DAST, IAST, and software composition analysis.
- Web Application Firewalls (WAF), API security, secrets and key management.
- Vulnerability management, secure SDLC, and application resiliency/redundancy design. Network Security
- Firewalls, IDS/IPS, VPN, network segmentation, micro-segmentation, and zero-trust network design.
- Wireless security, email and web gateways, and cloud network security.
- Antivirus, EDR/XDR platforms, host-based firewalls, and Mobile Device Management (MDM). Security Operations
- SIEM, SOAR, threat intelligence platforms, and incident response integration.
- Detection engineering and security monitoring strategy. Cross-Functional Governance
- Working across multiple projects and business units to ensure compliance with security standards and regulatory requirements. Preferred Qualifications
- Experience architecting security solutions for legacy transformation and modernization programs .
- Industry certifications such as CISSP, CCSP, SABSA, TOGAF, Azure Security Engineer/Architect, or equivalent .
- Exposure to regulatory frameworks (ISO 27001, NIST, GDPR, HIPAA, PCI-DSS, etc.). Key Attributes
- Robust architectural mindset with the ability to balance security, usability, and business agility.
- Excellent communication and stakeholder management skills.
- Proven ability to influence technical and non-technical audiences.
- Strategic thinker with hands‑on technical depth.
- Educational qualifications — B.E./B.Tech/MTech in CS/IT or equivalent #J-18808-Ljbffr Apply on Kit Job: kitjobau.com/job/3rs45k