About the role We are seeking an experienced Enterprise Security Architect to provide technical and delivery leadership across enterprise endpoint protection, application control, data loss prevention, and vulnerability management capabilities. This role is accountable for defining the target-state security architecture, governing solution integrity, and directing delivery across Trellix and Tenable technologies. You will ensure that endpoint, application, data, identity, network, workload, visibility, analytics, automation, and orchestration controls operate as an integrated security ecosystem that supports advanced Multi-Level Security (MLS) and Zero Trust Architecture (ZTA) maturity.

The successful candidate will act as the senior technical authority for the Protect capability, translating security policy, classification, mission, operational, and assurance requirements into practical architecture patterns, delivery roadmaps, platform integrations, and measurable security outcomes. What you'll be responsible for - Own the enterprise security architecture and end-to-end technical delivery direction for endpoint protection, application control, data loss prevention, and vulnerability management capabilities.

- Define and govern target-state architectures, transition states, reference patterns, security standards, integration patterns, and implementation guardrails across Trellix and Tenable platforms.
- Provide technical and delivery leadership to architects, engineers, process consultants, analysts, testers, vendors, and operational support teams.
- Lead the architecture, implementation, integration, and optimisation of Trellix capabilities, including endpoint protection, endpoint detection and response, application and change control, data loss prevention, device control, policy management, and centralised administration.
- Lead the architecture, implementation, integration, and operationalisation of Tenable capabilities, including asset discovery, vulnerability assessment, credentialed scanning, risk-based prioritisation, exposure management, remediation tracking, compliance assessment, and executive reporting.
- Ensure endpoint protection,



application control, DLP, and vulnerability management capabilities are designed as complementary controls and integrated with identity, network, data, cloud, application, SIEM, SOAR, ITSM, configuration management, and security operations services.
- Define security architecture patterns that support MLS outcomes, including security classification and labelling, data-centric security, mandatory and attribute-based access control, trusted enforcement points, need-to-know controls, separation of security domains, cross-domain information flows, and high-assurance auditability.
- Maintain architecture alignment across the ZTA technology pillars of user, device, application and workload, data, network and environment, visibility and analytics, and automation and orchestration.
- Ensure access decisions consider user identity, clearance, role, device posture, workload identity, data classification, mission context, environmental risk, and continuous security telemetry.
- Establish architectural approaches for least privilege, explicit verification, continuous authorisation, micro-segmentation, policy enforcement, attack-surface reduction, lateral-movement prevention, and continuous control assessment.
- Develop capability roadmaps and maturity plans that sequence foundational, intermediate, and advanced MLS and ZTA outcomes across people, process, technology, governance, and operations.
- Lead technical planning, solution decomposition, delivery sequencing, dependency management, design assurance, and resolution of cross-platform architecture issues.
- Review and approve architecture descriptions, decision briefs, system designs, interface specifications, security patterns, configuration standards, test strategies, operational models,



and transition-to-service artefacts.
- Identify and manage technical risks, capability gaps, product constraints, integration dependencies, security exceptions, and residual risks.
- Ensure designs align with applicable Australian Government security policy, assurance requirements, enterprise standards, and operational support models.

What we're looking for - Experience in enterprise security architecture, cyber security architecture, infrastructure security, security engineering, or complex technology delivery roles.

- Proven experience providing technical and delivery leadership across endpoint protection, application control, DLP, and vulnerability management workstreams in large enterprise or government environments.
- Strong architecture-level and implementation knowledge of Trellix technologies, including endpoint security, endpoint detection and response, application and change control, data loss prevention, device control, and ePolicy Orchestrator.
- Strong architecture-level and implementation knowledge of Tenable technologies - Demonstrated experience integrating security platforms with SIEM, SOAR, ITSM, identity and access management, privileged access management, endpoint management, configuration management, network security, data governance, cloud platforms, and reporting services.
- Advanced knowledge of MLS concepts and enabling technologies - Advanced knowledge of ZTA principles and technology pillars - Experience developing security capability roadmaps, maturity assessments, target-state architectures, transition architectures, reference patterns - Strong understanding of threat modelling, security control design, defence in depth, attack-path analysis, exposure management, continuous monitoring, and security assurance.
- Demonstrated ability to lead complex technical workshops, resolve competing architecture priorities, communicate with senior stakeholders, and provide transparent direction to multidisciplinary delivery teams.

Security

Clearance - Current Australian Government security clearance (NV1 or higher),

📌 Enterprise Security Architect- AU Citizen with Security Clearance (Sydney)
🏢 Accenture
📍 Sydney