Security Architect

We're looking for an experienced Identity Architect to work on a client project in the financial services industry.

The purpose of this role is to serve as an Identity Architect with a strong focus on Active Directory, Windows Server, and Privileged Access Management. You will spearhead the design and implementation of strong Role Based Access Controls, privilege escalation prevention and administrative boundaries across Certificate Services, Azure IaaS, and multiple Directory Services instances. Initial 6-month contract with potential to renew.

Key Responsibilities

• Project Delivery and Security Improvement


• Identify and consolidate new and known risks related to privilege escalation or lateral movement across all client AD, AAD, Azure IaaS and relevant systems administration practices.


• Drive the solution design, key stakeholder management, deliver, implementation, and documentation of priority risk remediation activities.


• Align processes and security baselines with industry security best practises and frameworks such as CIS, ISM and MS RAMP.


• Understanding of regulatory requirements for financial institutions such as APRA, ASIC, Monetary Authority of Singapore (MAS), Privacy and GDPR.


• Excellent working knowledge of the Mitre Attack framework


• Knowledge of security standards and frameworks such as ISO 27000 and CIS benchmarks.


• Must be a critical thinker, with strong problem-solving skills.


• High degree of initiative and ability to work with little supervision.


• High level of personal integrity

Interacts with Key Stakeholders:

• Identity Lead


• Technology organisation


• Security and Risk Team


• Technology solution and Enterprise Architects


• Project Teams


• System owners


• Third-party solution vendors


• Support vendor technical specialists

Experience Requirements:

• Minimum of ten years of experience in IT roles with a minimum three years’ experience in a similar security risk remediation role.


• Experience in securing Windows environments, Active Directory, Azure Active Directory and Azure IaaS Cloud environments.


• Good knowledge of PIM and PAM technologies including Microsoft PIM and Delinea Secret Server


• Experience in working in a multi-vendor environment would be advantageous.


• Excellent written and verbal communication skills, interpersonal and consultative skills, and the ability to communicate concepts to technical and non-technical audiences.


• Exhibit excellent analytical skills, the ability to manage multiple project components under strict timelines, as well as the ability to work well in a demanding, dynamic environment

General Compliance:

• Ensure a safe working environment in accordance with the relevant Work Health and Safety (WHS) legislation


• Work within and actively promote the core vision, corporate strategies, values, policies, procedures and Code of Conduct


• Ensure a thorough understanding of and adherence to any corporate or government compliance requirements


• Ensure adherence to Starboard IT Information Security policies, procedures, standards and proactively report


• Continued employment is subject to the successful completion of AFP Police clearance check


• Located in Sydney/Melbourne CBD


• Australian citizen, permanent resident and hold a valid working rights visa.

Benefits:

• Competitive salary


• Initial 6-month engagement with the potential to renew an additional 6 months


• Flexible hybrid working environment (WFH & Onsite)