Security Architects RFQ ID: LH-01378 ASD 2025
Due to the nature of clients we work with here at Kinexus and the projects these roles will be based on, an Australian Government Top Secret Positive Vetting (TSPV) clearance is essential.
These opportunities do not have the ability to obtain sponsorship for a security clearance (including applicants who currently hold a security clearance seeking to upgrade).
ABOUT THIS ROLE
Security Architects design, review, test and assure the technical environment, solution designs and solution implementations in accordance with current and emerging security best practice. They contribute to the technical architecture and security policies and practices.
ASD requires 2 x equivalent EL1 Security Architects to analyse and assess complex technical systems to as part of the authority to operate process. They will require in-depth knowledge of, and compliance with, legislative frameworks, government decision-making and the Australian Signals Directorate's mission and policy requirements.
- Estimated start date: Tuesday, 01 July 2025
- Initial contract duration: 12 months
- Extension term: 12 months
- Number of extensions: 2
- Experience level: EL1 equivalent
- Location of work: ACT
- Working arrangements: Onsite. WFH cannot be accommodated. Interstate based candidates may be accommodated, subject to operational needs. Candidates must be willing to undergo ASD's PV Validation process prior to engagement.
- Maximum hours: 40 hours per week
- Security clearance: Positive Vetting
ABOUT THE COMPANY
Australian Signals Directorate (ASD) is the federal agency responsible for foreign signals intelligence, cyber warfare and information security. ASD's purpose is to defend Australia from global threats and help advance our national interests.
Situated in Canberra, ASD employs over 2000 TSPV cleared workers. ASD's workforce is growing rapidly. Areas of growth include PMO, cyber security, systems administration and engineering, software development and network engineering.
A top-security, complex and highly technical environment, ASD plays a vital role in the defence of Australia. Long contracts (12 months+) available.
JOB DUTIES AND RESPONSIBILITIES
- Analyse and assess technical systems as part of authority to operate procedures.
- Manage relationships with various technical teams in support of efforts to secure their systems.
- Manage the team's relationship with Mission Data Division stakeholders and other ASD stakeholder.
- Work with external partners to assist their technical systems in obtaining authority to operate status.
- Determine security requirements by evaluating business strategies and leading threat risk assessment activities; research information security standards; conduct system security and vulnerability analyses and risk assessments.
- Architect solutions that deliver to the ASD Mitigation strategies and meet the Australian Government Protective Security Policy Framework (PSPF and the Australian Government Information).
- Review existing system security measures, recommend and implement enhancements.
- Develop, deliver and update System Accreditation Plan (SAP), Security Risk Management Plan (SRMP) to ensure Capability solution architecture/design(s) can sufficiently mitigate the identified threats.
- Analyse, design, develop, deliver and maintain the security perspective of a Cyber Security Capability.
- Liaise with certification and accreditation authorities, business stakeholders and solution architects to drive a solution/design to an accreditation outcome.
- Review internal/externally developed security engineering artefacts to ensure that all security requirements are addressed.
- Advise Program Design Authority on system security threats, risks and mitigations.
Candidates must have the following technical skills:
- At least 5 years' experience as a security architect working across security architecture, security and risk management, communication and network security or security operations domains.
- Experience ensuring technical systems adhere to Essential Eight, ISM, ISO:27001 and PSPF frameworks.
- Proven ability to communicate complex technical systems to non-technical audiences.
- Excellent organisational and communication skills.
- Proven record building, managing, and enhancing relationships with stakeholders.
- Experience developing, managing, and implementing SOPs and procedures in support of security accreditation frameworks.
Candidates should have the following:
- Bachelor's degree in Information Technology.
- Experience managing complex projects.
- Experience with the use of cloud-based technologies.
SKILLS & EXPERIENCE NEEDED
Essential criteria
1. Information assurance:
Interprets information assurance and security policies and applies these to manage risks. Provides advice and guidance to ensure adoption of and adherence to information assurance architectures, strategies, policies, standards and guidelines. Plans, organises and conducts information assurance and accreditation of complex domains areas, cross-functional areas, and across the supply chain. Contributes to the development of policies, standards and guidelines.
2. Information security:
Provides advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards. Contributes to development of information security policy, standards and guidelines. Obtains and acts on vulnerability information and conducts security risk assessments, business impact analysis and accreditation on complex information systems. Investigates major breaches of security, and recommends appropriate control improvements. Develops new architectures that mitigate the risks posed by new technologies and business practices.
3. Systems design:
Designs large or complex systems and undertakes impact analysis on major design options and trade-offs. Ensures that the system design balances functional and non-functional requirements. Reviews systems designs and ensures that appropriate methods, tools and techniques are applied effectively. Makes recommendations and assesses and manages associated risks. Adopts and adapts system design methods, tools and techniques. Contributes to development of system design policies, standards and selection of architecture components.
4. Security operations:
Monitors the application and compliance of security operations procedures. Reviews actual or potential security breaches and vulnerabilities and ensures that they are promptly and thoroughly investigated. Recommends actions and appropriate control improvements. Ensures that security records are accurate and complete and that requests for support are dealt with according to agreed procedures. Contributes to the creation and maintenance of policy, standards, procedures and documentation for security.
Australian Citizenship and a TSPV security clearance is essential.
BENEFITS
Why work for ASD?
- Work on interesting and prestigious projects vital to the ongoing defence of Australia.
- Flexible work environment; work the hours that suit you between 7am and 7pm.
- Low attrition rate: the great variety of projects and opportunities across different business areas ensure few workers leave ASD.
- Long contracts available.
- Fantastic growth opportunities available at any stage of your career.
Why Kinexus?
- Kinexus has been supplying TSPV contractors to government panels since 2004 and have a strong relationship with them. We are one of just 9 suppliers Australia-wide.
- Our experience in managing contractors in defence/national security industries means we understand the requirements from the Commonwealth, insurances and clearances.
- DISP accredited; we can hold clearances and manage renewals.
- Dedicated account manager (me!) who is your dedicated POC and offer continuous contractor care.
- Rate negotiation guidance in line with the SFIA framework.
- Dedicated payroll assistant who facilitates your taxes and super.
- We proactively chase timesheet approvers to ensure you get paid on-time and error free.
- Regular visits to Canberra for coffee, lunches and quarterly drinks events.
- We can facilitate novated car leases, LAFHA or salary sacrifice.
- We'll keep you up to date with the most appropriate, interesting opportunities in your field.
- Community matters. Kinexus supports women in Defence through our female mentoring program and rewards referrers through our Referral Rewards scheme.
- Support for your health and wellness through counselling support (EAP) available for all contractors and their families.
Kinexus is the leading recruitment partner to the defence industry in Australia. We support our community in making intelligent connections and create opportunities to help grow careers.
All applications should include your resume as a word document. For more information, visit our website, www.kinexus.com.au or contact Cindace Prasad at 0449 511 324. #LI-CP
