Security Architect

The Australian Electoral Commission (AEC) is seeking to engage suitably qualified and experienced Security Architect to deliver and support a range of ICT projects/programs. This role requires a balanced approach that blends deep technical expertise with strong stakeholder engagement skills. As a Security Architect, you will: •    play a critical role in ensuring the security, resilience, and scalability of Indigo solutions •    be responsible for defining, designing, and embedding security principles and best practice across the Indigo Program’s architecture, ensuring in alignment with enterprise security frameworks and regulatory requirements •    work collaboratively with Systems Team, ADTs, BAU, and leadership to develop a pragmatic, secure, and scalable solutions that support Indigo Program objectives. The candidate must hold an active Baseline security clearance prior to commencement and be able to obtain and maintain a Negative Vetting Level 1 clearance. Key duties and responsibilities The Security Architect will be responsible for, but not limited to: Coordinating and driving security team outcomes for the Indigo Program, supporting effective engagement with management, delivery functions, BAU stakeholders and subject matter experts, and ensuring alignment with agreed priorities and standards. Acting as the primary point of contact for the team, triaging information, issues and requests, and translating security risks into actionable requirements and build activities. Developing standards, frameworks and practices for secure, scalable and repeatable architecture for the Indigo Program, in alignment with AEC strategies and frameworks. Providing guidance and advice to Solution Architects and Agile Delivery Teams on secure and reliable solution architecture design, including assisting with the development of Logical Solution Architecture Documents (LSADs), Conceptual Solution Architecture Documents (CSADs) and other architectural design documentation. Performing security reviews and assessments, identifying gaps in security architecture and developing security risk management plans. Supporting the testing and validation of security configurations. Coordinating with development and platform teams to advocate for secure coding practices and support cyber security awareness across the Indigo Program. Reviewing security technologies, tools and services, and making recommendations to the broader security team based on security, financial and operational metrics. Driving continuous improvement in processes, artefacts, team capabilities and ways of working to improve quality, efficiency and consistency. Representing the security function in governance forums and senior stakeholder engagements. Providing high-quality and timely advice that clearly articulates risks, trade-offs and recommended courses of action to technical and non-technical stakeholders, supporting informed decision-making aligned with Information Security Manual (ISM) and Protective Security Policy Framework (PSPF) guidance, AEC doctrine and Program objectives. Managing assigned work items as per established Ways of Working, and producing and maintaining appropriate documentation as required. Performing additional responsibilities as required and directed by the relevant Director/Team Leaders or a delegate. Criteria The buyer has specified that each candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters. Essential criteria 1. • Knowledge of Whole of Government ICT Services, standards, frameworks and capabilities such as TDIF, PSPF, Gatekeeper, GovLink, Essential Eight, IRAP and ISM. • Experience in using architecture methodologies such as TOGAF • Direct experience or strong working knowledge of managing security infrastructure • Direct experience or a strong working knowledge of vulnerability management tools • Experience securing the deployment of applications and infrastructure into public cloud services • Full-stack knowledge of IT services, networking, platforms and infrastructure with regard to Public/Private and hybrid Cloud and on prem design, deployment and operation. • Direct experience designing, deploying and operating IAM technologies, protocols and services in cloud, hybrid and on prem environments supporting internal and external user types. 2. To be considered compliant, submissions need to be provided in 1 PDF Document including: Page 1 - a completed copy of the AEC Candidate Submission Guide (will be emailed to the listed BuyICT contact address upon RFQ publication): • Provide information for the following items: Candidate Name, Position Title, Opportunity ID, Candidate Availability, Location, Citizenship Status, Security Clearance Level, Planned Leave (exceeding 1 week), Additional Engagements, Submitting Consultant. • Choose an item or check the box that applies to the following options: Previous AEC Employee or Contractor, Current AEC Contractor, Code of Conduct, Submission History, Authority to Represent, Submission Compliancy • Consultant comments may be added (must be limited to the space provided). Page 2 - A one-page pitch addressing the selection criteria. This should not exceed one page. Pages 3 - 5 - A resume of no more than three pages We will strictly adhere to the above requirements. Submissions will be deemed non-compliant if they do not meet the listed criteria, if they exceed the 5-page limit or if the rates of submitted candidates are included in the PDF. Desirable criteria 1. • Tertiary qualifications in computer science, information systems, cybersecurity or a related field • Certifications: • International Information Systems Security Certification Consortium (ISC2) • Certified Information Systems Security Professional (CISSP) • Information Systems Audit and Control Association (ISACA): • Certified Information Systems Auditor (CISA) • Certified Information Security Manager (CISM) • The Open Group's TOGAF • SANS Institute Global Information Assurance Certification (GAIC) Opportunity summary Sellers can submit Up to 1 candidate Number of sellers invited Fewer than 5 Number of candidates submitted Fewer than 10 RFQ closing time 00 Weeks 03 Days 06 Hours Send us feedback About Accessibility Privacy Terms of use Disclaimer and copyright An initiative of the Digital Transformation Agency The Australian Government acknowledges the Traditional Owners of Country throughout Australia and acknowledges their continuing connection to land, waters and community. We pay our respects to the people, the cultures and the Elders past and present. © Commonwealth of Australia