Senior Security Architect

Description:

A tertiary qualification and/ or equivalent experience in a cyber security role with demonstrated

experience as a security architect specialising in identity solutions.

• Demonstrated and proven knowledge & experience in:

1. Implementing of enterprise-scale IDM and IAM solutions and technologies.

2. Defining, designing, and overseeing the implementation of secure identity solutions architectures in alignment with appropriate platform security standards & frameworks.

3. Designing solutions using common industry standard cloud-native authentication and authorization mechanisms, MFA and SSO; in-depth knowledge of IAM architectures.

4. Implementing or managing; Identity, Management (Microsoft, Oracle), Privileged Access

Management (Microsoft Delinea), Access Management (Microsoft AD, Azure AD),

Authorisation Frameworks (SAML, OAuth), MFA (AAD, Ping ID, OKTA), SSO, and federated identities.

5. Developing and maintaining standards and procedures to ensure the integrity and security of ASIC’s internal and external identity environments.

6. Using industry security control frameworks and standards, including NIST and ISO 27001, as well as those applicable to Australian Government entities, including the ACSC ISM and the ASD Essential Eight, to design secure solutions.

• Technical aptitude and the experience to continually learn new security technologies and understand relevant security market trends.

• Demonstrable skills in assessing, analysing, and resolving complex client and stakeholder related queries, utilising all relevant sources of information, media and stakeholder channels, data, reporting, systems and/or databases.

• Excellent interpersonal and consultative skills.

• Ability to effectively present complex information to project and senior level audiences both verbally and in writing.

• Ability to work independently with limited supervision and be accountable for outcomes.

• Experience working collaboratively with multifunctional project teams, building, and maintaining productive working relationships.

• Formal security certifications are desired but not essential.