Senior Solution Architect (Enterprise Key Management & Secrets Management)

Location: Canberra ACT (Onsite) Security Clearance: Must have ositive Vetting (PV) Level: Senior (EL2 Equivalent) About the Role We are seeking an experienced Senior Solution Architect to lead the design, governance, and implementation of secure enterprise solutions supporting Enterprise Key Management Systems (EKMS) and Secrets Management Systems (SMS) within a highly secure government environment. The successful candidate will provide architectural leadership across complex cyber security, infrastructure, cloud, and enterprise technology initiatives. You will work closely with security architects, project teams, business stakeholders, and technology vendors to design and deliver resilient, scalable, and compliant solutions that protect Australia's most sensitive information assets. Key Responsibilities Lead the development of end-to-end solution architectures for enterprise key management and secrets management capabilities. Design secure architectures supporting: Cryptographic key lifecycle management Secret storage and retrieval Certificate management and PKI integration Privileged Access Management (PAM) Automated key rotation and credential management Produce and maintain architecture artefacts including: Solution designs Security architecture models Integration patterns Infrastructure designs Data flow diagrams Technology roadmaps Conduct architecture reviews, technology assessments, and option analyses. Develop migration strategies from legacy credential and key management frameworks to centralized enterprise platforms. Design integration patterns for: Applications CI/CD pipelines Container platforms Cloud services Provide architectural governance through design authorities, review boards, and assurance activities. Identify and manage architectural risks, dependencies, and technical debt. Support accreditation and certification activities and prepare associated security documentation. Contribute to the development of security policies, standards, operational procedures, and technical playbooks. Mentor engineering teams and provide architectural guidance across projects and enterprise initiatives. Requirements Essential Skills & Experience Solution Architecture Minimum 10 years' experience leading solution architecture activities within large and complex enterprise environments. Demonstrated experience delivering architecture for cyber security, cloud, infrastructure, or digital transformation programs. Strong understanding of enterprise architecture methodologies and architecture governance practices. Security & Cryptography Experience designing and implementing: Enterprise Key Management Systems (KMS) Secrets Management Platforms Identity and Access Management (IAM) Public Key Infrastructure (PKI) Cryptographic security solutions Privileged Access Management (PAM) Strong knowledge of key lifecycle management and certificate management processes. Cloud & Infrastructure Experience designing secure solutions across: On-premises environments Hybrid cloud platforms Public cloud services Expertise in high availability, disaster recovery, resilience, and operational supportability. Security Frameworks & Compliance Strong understanding of: Protective Security Policy Framework (PSPF) Information Security Manual (ISM) ASD security requirements Zero Trust Architecture Defence-in-Depth principles Australian Government cyber security standards Stakeholder Management Proven ability to engage and influence: Senior executives Governance boards Technical leadership teams External vendors and delivery partners Excellent written and verbal communication skills. Desirable Experience Experience working within Defence, Intelligence, National Security, or Federal Government environments. Experience with technologies such as: HashiCorp Vault Azure Key Vault AWS KMS CyberArk Thales CipherTrust Hardware Security Modules (HSMs) Experience supporting security accreditation and authority-to-operate activities. Knowledge of container security, Kubernetes, DevSecOps, and CI/CD security practices. Qualifications Bachelor's degree or higher in Information Technology, Cyber Security, Computer Science, Engineering, or related discipline. Relevant industry certifications highly regarded, including: TOGAF SABSA CISSP CCSP Azure Solutions Architect Expert AWS Solutions Architect Professional