Security Architecture SME (Secure by Design)

Location - Sydney

Job type: Full time / Contract

Job Role Overview

We are seeking a highly skilled Secure by Design (SbD) Security SME to play a critical role in embedding security into the design and delivery of major business and technology initiatives. The role focuses on defining, assessing, and implementing security requirements throughout the project lifecycle—ensuring security is integrated from the outset and remains aligned with enterprise architecture, risk frameworks, and organizational objectives.

You will work closely with architects, engineers, and delivery teams to ensure solutions are designed and implemented securely, while also contributing to the development of reusable security patterns, blueprints, and capability uplift across the organization.

Key Responsibilities

- Analyze business objectives, regulatory obligations, and threat models to define comprehensive security requirements.
- Translate business and solution designs into logical security domains and impact assessments.
- Identify design gaps, areas of non‑compliance, and potential security exposures early in the project lifecycle.
- Document security architecture, controls, and recommended remediation steps.
- Collaborate with solution architects, engineers, and delivery leads to address identified issues.
- Escalate recurring or systemic capability gaps for enterprise‑wide improvements.
- Drive the full SbD design lifecycle and secure design‑phase endorsement from key stakeholders.

Security Implementation

- Select and integrate appropriate security components based on approved SbD designs.




- Translate security requirements into actionable implementation tasks and configurations.
- Identify and document implementation gaps or deviations from the approved design.
- Partner with engineering, IT teams, and vendors to embed security into applications and systems.
- Produce explicit documentation of implemented controls for governance, reuse, and compliance.
- Contribute to the development of repeatable patterns and security blueprints.
- Support security assurance and risk assessment processes to validate residual risks.
- Balancing strategic objectives with practical, operational security implementation.
- Influencing diverse stakeholders and communicating complex concepts clearly.
- Modernising legacy environments and transitioning toward cohesive, enterprise‑aligned security architecture.
- Ensuring security enables business agility without unnecessary complexity.

Qualifications & Skills

- Bachelor’s degree in engineering, Computer Science, or related discipline.
- 10–15+ years’ experience in cyber security, including at least 5 years as a security architect or security engineer.
- Strong knowledge across major security domains (architecture, IAM, application security, risk management, cloud security).
- Hands‑on experience providing technical security leadership in complex environments.
- Strong analytical, documentation,



and presentation skills.
- Ability to work independently and in Agile delivery environments.
- CISSP, CCSP, SABSA, TOGAF or other relevant security/architecture certifications.
- Cloud security certifications (e.g., Azure Security).

Why Us

We are one of the fastest‑growing large tech companies in the world, with offices in 50+ countries across the globe and 219,000 employees.

- Our company is extremely diverse with 165 nationalities represented.
- We offer the opportunity to work with colleagues across the globe.
- We offer a virtual‑first work environment, promoting a good work‑life integration and real flexibility.
- We offer comprehensive benefits for all employees.
- We are a certified great place to work and a top employer in 17 countries, offering a positive work environment that values employee recognition and respect.

Equality & Opportunity for All

Representing 165 nationalities across the globe, we pride ourselves on being an equal opportunity employer, committed to providing equal employment opportunities to all applicants and employees regardless of race, religion, sex, colour, age, national origin, pregnancy, sexual orientation, physical disability or genetic information, military or veteran status, Aboriginal and Torres Strait Islander people or any other protected classification, in accordance with federal, state, and/or local law

Candidate Data Privacy Notice

Seniority level

Mid‑Senior level

Employment type

Full‑time

Job function

Business Development

Industries

IT Services and IT Consulting and Banking

#J-18808-Ljbffr

📌 Security Architecture SME (Secure by Design) (Melbourne)
🏢 HCLTech
📍 Melbourne