About the Client
Our client is a high-profile Australian Government organisation responsible for protecting Australia's national interests against sophisticated global and cyber threats. Operating within a highly secure and technically complex workplace, the organisation delivers critical intelligence, cyber security and security capabilities that support the Australian Government. This is an opportunity to contribute to nationally significant work while collaborating with experienced cyber security, architecture, infrastructure, cloud and engineering professionals.
About the Role
The Lead Cryptographic Security Engineer will provide specialist technical leadership across the design, implementation, integration, assurance and operation of an enterprise-scale Key Management System capability. Operating at SFIA Level 5, you will independently provide technical advice and support the delivery of resilient, compliant and secure cryptographic services across complex, multi-classified technology environments.
Key responsibilities will include:
Designing, deploying and configuring enterprise key management infrastructure and cryptographic services
Managing cryptographic key lifecycles, including generation, storage, rotation, archival, recovery and destruction
Configuring and supporting Key Management Systems and Hardware Security Modules
Integrating cryptographic capabilities with enterprise platforms, applications and infrastructure
Implementing secure API-based integrations and encryption services across cloud, hybrid and on-premises environments
Supporting Public Key Infrastructure, certificate management and machine identity services
Conducting technical risk assessments, security assurance and cryptographic solution validation
Identifying and remediating cryptographic vulnerabilities and security weaknesses




Supporting security accreditation, compliance, audit and design assurance activities
Developing engineering standards, operational procedures, runbooks and technical documentation
Monitoring the availability, resilience and performance of enterprise cryptographic services
Providing specialist advice to technical, operational, project and senior stakeholder groups
The Successful Candidate
The successful candidate will be an experienced security or cryptographic systems engineer with the ability to operate independently and provide authoritative specialist advice within complex, secure or classified ICT environments.
You will bring demonstrated experience in:
Designing, implementing and supporting cryptographic solutions in complex enterprise or classified environments
Applying contemporary cryptographic principles, protocols and standards
Public Key Infrastructure design, management and lifecycle operations
Enterprise Key Management Systems and Hardware Security Modules
Secure communications, encryption technologies and key distribution mechanisms
Cryptographic assurance, validation, threat modelling and risk assessment
Security architecture and the integration of cryptographic controls
Delivering security outcomes within Commonwealth, Defence, national security or similarly regulated environments
Supporting system accreditation, certification, compliance or assurance activities




Communicating complex cryptographic concepts to technical and non-technical stakeholders
Managing competing priorities and delivering high-quality outcomes within agreed timeframes
Highly regarded experience and qualifications include:
A degree in cyber security, computer science, information security, engineering, mathematics or a related discipline
CISSP, CISM, CCSP or comparable industry certifications
Cryptographic security, encryption, cloud security, KMS or HSM certifications
Familiarity with the Information Security Manual, Protective Security Policy Framework and Essential Eight
Experience with Secure-by-Design and Zero Trust principles
Cloud cryptography experience across Azure, AWS or other government-approved platforms
Exposure to quantum-resistant cryptography, transition planning or emerging cryptographic standards
Candidates must also be willing to undergo an Organisational Suitability Assessment (OSA) prior to engagement.
Location:
The role is based in Canberra ACT.
Contract terms:
12 months from commencement date, plus 2x 12 month extensions
Experience Level:
Senior – EL1 Equivalent
Security Requirements:
Candidates must hold an active or reactivatable Top Secret Positive Vetting (TSPV) Security Clearance on submission. Our client is not looking to upgrade an existing clearance for this position. An OSA (Organisational Suitability Assessment) will be required for this position.
Candidates will need to be willing to undergo pre-employment screening checks which may include, ID and work rights, security clearance verification and any other client requested checks.
Applications open until
8am 06 October ****
.
Reach Damien on ************ or for any further information
#J-*****-Ljbffr

📌 Lead Cryptography Security Engineer (Canberra)
🏢 Whizdom
📍 Canberra