Cyber Security Design Lead

Open To: Australian Citizen With An Active Negative Vetting Level 1
 
Location: Melbourne, Canberra or Adelaide - Hybrid Role
 
In this role, you will lead, manage and provide cybersecurity engineering services and support and be part of the Cyber delivery technical implementation team providing priority cybersecurity enhancements. These include engagement planning, technical design, implementation, and onboarding of development and engineering teams to the services.
You will need to have had significant experience in engineering, contemporary security and controls.  
As the Cyber Lead you will lead, contribute, and collaborate with a multi-skilled team to deliver cutting-edge security technologies to the agency, and will transition post-project to manage the products in BAU
 
Duties may include, but are not limited to:
 

• Lead designing feature enhancements, implementation, and maintenance of a secure secrets management infrastructure using Hashicorp Vault.
• Lead designing feature enhancements, implementation, and maintenance of a secure secrets management infrastructure using Hashicorp Vault.
• Perform a technical leadership role, operating potentially as a Product Owner in a multidisciplinary team.
• Provide broad technical support, design and engineering services for a project build, test and solution deployments.
• Define and enforce access control policies for secrets.• Liaise on technical discussions with infrastructure, Cyber Security and development teams to address their requirements for a secure credential management solution.
• Drive innovation, continuous improvement and manage and lead change in securing development pipelines.
• Collaborate with a broad range of internal and external stakeholders to achieve project outcomes.
• Oversee and prepare technical documentation.
• Prepare reports to support senior executives through decision making Identify and implement new tools and features to strengthen the capability, efficiency, and security of the secrets management system.
• Mature the usage and practices around HashiCorp Vault within the agency.

• Hashicorp Vault (Enterprise version).
• Linux (RHEL).
• Ansible Automation Platform (YAML).
• Gitlab (CI/CD pipelines)
• OpenStack/VMware (Networking Security Groups).
• LDAP
• JWT.Kubernetes.
• OIDC.
• IBM Security Verify Access (ISVA).
• RSA Authentication Manager
• Terraform,
• packer,
• nftables,
• filebeat & metricbeat.