Are you a senior Architect with strong experience across Public Key Infrastructure (PKI), Hardware Security Modules (HSMs), certificate management, key management and associated trust services — holding an active NV1 or higher clearance and available to work onsite in Canberra?
Azooa is preparing a response for
RFQ LH-*****
with the
Department of Foreign Affairs and Trade (DFAT)
and is seeking suitably qualified contractors for a
Principal Enterprise Architect – Cryptographic Services / PKI Technical Lead
engagement.
This is a senior
Principal / EL2-equivalent
opportunity within DFAT's Cyber Security, Cloud and Networks Branch, focused on assessing, enhancing and maturing the Department's enterprise cryptographic services capability.
Working arrangement:
100% onsite – 5 days per week
Maximum hours:
40 hours per week
Potential tenure:
Up to 3 years
ABOUT THE PROSPECT
DFAT's
Cyber Security, Cloud and Networks Branch
is responsible for delivering and operating critical cyber security, identity and trust services supporting departmental and business outcomes.
The successful contractor will support the assessment, enhancement and future delivery of DFAT's enterprise cryptographic capability across areas including:
Hardware Security Modules – HSMs
Cryptographic key management
Identity and high-assurance trust services
Security and solution architecture
Cryptographic governance
Security risk management
Operational process improvement
The role requires a senior technical leader capable of balancing
solution architecture, cyber security, governance, policy, operational resilience and practical delivery requirements
within a complex Australian Government environment.
CORE RESPONSIBILITIES
The successful candidate will provide architectural and technical leadership for the delivery, governance and ongoing evolution of DFAT's cryptographic services.
Key responsibilities include:
Provide technical leadership across enterprise
PKI, HSM and cryptographic services
Assess current cryptographic capabilities and undertake architecture, security, governance and operational gap analysis
Define and maintain
target-state cryptographic architectures
Establish appropriate trust models, key-management approaches, security standards and availability requirements
Develop practical capability improvement roadmaps and future-state plans
Act as a senior technical authority for cryptographic and security architecture decisions
Lead solution architecture and detailed technical design
Ensure secure implementation, deployment and operational practices
Identify and manage cryptographic risk, technology dependencies and operational resilience requirements
Develop and maintain cryptographic governance artefacts, policies, standards, procedures and operating models
Support PKI governance frameworks and certificate-management policies
Establish security controls, assurance arrangements and risk-management processes




Work across architecture, cyber security, infrastructure, engineering, business, project and operational teams
Support engineering teams through design, build, testing, assurance, release and transition to operations
Produce architectural artefacts, technical designs, implementation guidance and operational documentation
Support upgrades, maintenance, testing, issue resolution and continual service improvement
Provide authoritative advice to technical and non-technical stakeholders
Mentor engineering and operational personnel and transfer specialist knowledge.
KEY DELIVERABLES
Current-state cryptographic capability assessments
Architecture, security and operational gap analysis
Target-state cryptographic architectures
PKI architecture artefacts
HSM architecture and integration designs
Trust models
Key-management architectures
Cryptographic capability roadmaps
Governance frameworks
Security-control and assurance frameworks
Operating models and decision authorities
Detailed technical designs
Implementation and transition plans
Operational-readiness documentation
Knowledge-transfer and capability-uplift materials
ESSENTIAL EXPERIENCE
We are particularly interested in candidates who can demonstrate senior-level experience across:
Cryptographic Security Architecture
Hardware Security Modules
Identity and trust services
High-assurance security environments
Strong experience assessing, designing or improving enterprise security and cryptographic services involving areas such as:
Hardware Security Modules
Identity and trust services
High-assurance security environments
You should be comfortable defining current and target-state architectures, identifying technical and governance gaps, developing trust models and security controls, and translating business and security requirements into practical enterprise solutions.
Experience developing sustainable governance arrangements for security, cryptographic, identity or trust services, including:
Policies and standards
Operating models and decision authorities
Delivery & Operational Readiness
Demonstrated experience across the secure technology lifecycle, including:
Architecture and design
Security assurance
Transition to operations
Technical risk and dependency management
Knowledge transfer and capability uplift
You should have experience operating as a
senior technical authority
and be comfortable:
Providing authoritative technical advice
Explaining complex cryptographic issues to technical and non-technical stakeholders
Resolving competing architecture,



security and delivery priorities
Influencing architecture, engineering, project, procurement and operational stakeholders
Mentoring personnel and transferring specialist knowledge
HIGHLY DESIRABLE
Experience in one or more of the following would be highly regarded:
Australian Government or Defence environments
Enterprise PKI / Certificate Authority environments
Hardware Security Modules
Cryptographic key-management technologies
Australian Government
Information Security Manual – ISM
PKI supporting ePassports or electronic travel documents
Biometric identity systems
Country Signing Certification Authority – CSCA
Certificate Revocation List lifecycle management
Cryptographic disaster recovery and assurance
Cryptographic agility
Candidates with strong adjacent experience across
security architecture, cryptographic services, infrastructure architecture, PKI governance, identity and trust, or senior cyber technical leadership
are also encouraged to apply where they can demonstrate the required architecture, governance and high-assurance security capability.
SECURITY CLEARANCE
Candidates who do not currently hold an active NV1 or higher clearance cannot be submitted for this chance.
ENGAGEMENT DETAILS
RFQ:
LH-*****
Buyer:
Department of Foreign Affairs and Trade
Role:
Principal Enterprise Architect – Cryptographic Services / PKI Technical Lead
Location:
Canberra ACT
Arrangement:
100% onsite
Remote working:
Not available
Initial contract:
12 months
DFAT also operates a contractor stand-down period during December and January, generally around
4–6 weeks at DFAT's discretion
.
Based on
recent Azooa contract wins and current Federal Government value-for-money positioning
, our indicative maximum recommended bidding levels are:
Pty Ltd:
up to
$160/hour + GST
PAYG:
up to
$158/hour
These are
recommended maximum bidding levels rather than target rates
.
Candidates may nominate higher rates; however, rate competitiveness forms part of the overall value-for-money position. Higher rates are more likely to be supportable where the candidate brings exceptional specialist expertise across
PKI, HSMs, cryptographic architecture, high-assurance environments, NV2 clearance or closely aligned DFAT/Defence experience
.
Senior
PKI Architects, Security Architects, Enterprise Architects, Cryptographic Services Architects, PKI Technical Leads, Identity & Trust Architects and HSM/Cryptographic Services specialists
are encouraged to apply.
Please also feel free to share this opportunity with suitably qualified professionals within your network.
#Azooa #DFAT #CyberSecurity #PKI #Cryptography #EnterpriseArchitecture #SecurityArchitecture #HSM #PublicKeyInfrastructure #CyberSecurityJobs #CanberraJobs #GovernmentJobs #NV1 #NV2 #DefenceJobs #ICTJobs #SolutionArchitecture #InformationSecurity #IdentitySecurity
#J-*****-Ljbffr

📌 Cyber Security Architect (Canberra)
🏢 Azooa
📍 Canberra