Principal Enterprise Architect (Cryptographic Services)

Location

Canberra, ACT

Working Arrangement

Onsite | Full time | 5 Days Per Week

Clearance Required

NV1 Security Clearance required. NV2 highly regarded.

Company Overview

Our client, the Department of Foreign Affairs and Trade (DFAT), plays a critical role in advancing Australia's international interests and delivering secure, trusted services that support government operations worldwide.

Within DFAT's Information Management and Technology Division, the Cyber Security, Cloud and Networks Branch is responsible for delivering and operating key cyber security, identity and trust services that underpin departmental and business outcomes.

DFAT is seeking an experienced Principal Enterprise Architect to provide technical leadership across a major program focused on the assessment, enhancement and future evolution of enterprise cryptographic services.

Job Description

This is a rare opportunity to lead the strategic direction of critical cryptographic capabilities within a highly secure Federal Government environment.

Working across business, architecture, cyber security, engineering and operational teams, you will drive the design, governance and long-term sustainability of enterprise trust services, including Public Key Infrastructure (PKI), Hardware Security Modules (HSMs), certificate lifecycle management and key management capabilities.

The successful candidate will combine deep technical expertise with strong stakeholder engagement and governance experience, helping shape future-state architectures while ensuring security, resilience and operational effectiveness across the organisation.

Duties and Responsibilities

- Lead the architecture, delivery and ongoing evolution of enterprise cryptographic services
- Provide technical leadership across PKI, HSM, certificate management and key management capabilities
- Develop future-state architectures, trust models and security design principles
- Conduct capability assessments, gap analyses and roadmap development activities
- Define and maintain governance frameworks, standards,



policies and operational procedures
- Act as the senior technical authority for cryptographic and security architecture decisions
- Lead solution architecture and detailed design activities across multiple initiatives
- Identify and manage technical risks, dependencies and operational resilience requirements
- Support engineering teams through design, implementation, testing and transition activities
- Produce and maintain architectural artefacts, technical documentation and implementation guidance
- Ensure alignment with government security frameworks, compliance obligations and industry best practice
- Provide mentoring, knowledge transfer and capability uplift across technical teams
- Engage and influence stakeholders across business, project, operational and executive environments

Education/Certifications Required

- Relevant tertiary qualification in Information Technology, Cyber Security, Engineering or a related discipline
- Industry certifications in enterprise architecture, cyber security or information security are highly desirable
- SABSA, TOGAF, CISSP, CCSP, CISM or similar certifications will be highly regarded

Knowledge/Skills Required

- Extensive experience in Enterprise Architecture, Security Architecture or Technical Leadership roles
- Demonstrated expertise in Public Key Infrastructure (PKI) and cryptographic services
- Experience with Hardware Security Modules (HSMs), certificate lifecycle management and key management solutions
- Strong understanding of security governance, policy development and operational frameworks
- Experience designing and implementing secure services within regulated or high-assurance environments
- Proven ability to develop target-state architectures,



operating models and technology roadmaps
- Strong understanding of risk management, security controls and assurance practices
- Experience applying Australian Government security frameworks, including the Information Security Manual (ISM)
- Ability to translate business and security requirements into practical, supportable solutions
- Experience supporting technology delivery, operational readiness and service transition activities
- Excellent communication and stakeholder engagement skills
- Strong leadership, mentoring and advisory capabilities

Highly Regarded

- Australian Government or Defence experience
- Gatekeeper PKI Framework experience
- Enterprise PKI and Certificate Authority technologies
- Identity and trust services
- ePassport or high-assurance identity environments
- Cryptographic key ceremonies and HSM-based key protection
- Disaster recovery and cryptographic assurance programs
- Post-quantum cryptography readiness assessments
- Active NV2 Security Clearance

Employment Benefits

- Opportunity to lead strategic cyber security and trust service initiatives
- Influence the future direction of enterprise cryptographic services
- Work on nationally significant systems within a highly secure environment
- Engage with senior stakeholders across architecture, cyber security and technology teams
- Long-term contract opportunity with extension options
- Contribute to complex programs delivering real impact across government
- Collaborate with highly skilled security, infrastructure and engineering professionals

Diversity and Inclusion

We are committed to fostering a diverse and inclusive workplace. We welcome applications from candidates of all backgrounds and experiences.

Veterans

Defence and Federal Government industry experience is highly desirable. We strongly encourage veterans and individuals with Defence experience to apply. Your unique skills and background are highly valued, and we are committed to supporting your transition into this role.

#J-18808-Ljbffr

📌 Principal Enterprise Architect - Cryptographic Services (Canberra)
🏢 www.clearedrecruitment.com.au
📍 Canberra