Estimated Start Date: Friday, 01 November 2024
Initial Contract: 12 months
Extension term: 2 x 12 months
Location: ACT, QLD, SA, VIC
Working Arrangements: Canberra-Brisbane-Melbourne-Adelaide Candidates must work from the Department's offices in one of the identified locations a minimum of 2 days per week.
Security Clearance: Must have Negative Vetting Level 1
The Cyber Secrets Management project is focused on implementation and agency adoption of a secrets management solution (HashiCorp Vault) to increase cyber security capability and reduce enterprise risk. The project is seeking a technical Senior Systems Analyst with cyber security specialisation. The role focuses on engagement with potential technical and non-technical consumers to analyse their current secrets management practices and evaluate and design integration solution proposals using HashiCorp Vault to meet their business needs. The resource will be closely working with the Engagement Lead, Technical Lead, and project management staff within the internal team to articulate design requirements to feed into the engineering backlog of work. The Senior Systems Analyst will be required to undertake work that is highly complex or sensitive and operate under broad direction. They will exercise a considerable degree of independence. Given the nature of the role and technology, the resource should have significant technical experience with a broad range of technologies and experience working with different applications development and infrastructure teams.
The following experience and knowledge are required: Technical systems analyst experience working across a broad range of capabilities such as Applications, Infrastructure, Security, Integration, DevSecOps, CI/CD. Demonstrated systems analyst experience working with a Secrets Management Solution within complex ICT environments. Preferably HashiCorp Vault. Understanding of credential usage in a complex ICT environment, risks relating to the compromise of credentials, and techniques to mitigate risks.
Experience supporting delivery of Cyber security capability in a System Analyst role. Strong stakeholder management skills, and the ability to communicate security concepts to non-technical audiences both verbally and in writing. Strong system documentation skills, including specifications and business process mapping. Ability to transfer knowledge and develop capability within the team. Tertiary or other relevant qualifications are advantageous (e.g. CompTIA Security+, ISC2 CISSP).
Mandatory Criteria
• Demonstrated Systems Analyst experience working with a secrets management solution within complex ICT environments - preferably HashiCorp Vault. Response should consider experience with secrets managements concepts such as authentication methods, system integrations and configuration of a secrets management solution to support stakeholder needs.
• Demonstrated technical Systems Analyst experience working across a broad range of capabilities, such as DevSecOps, CI/CD, Applications, Infrastructure, Security, Integration. Weighted Criteria
• Demonstrated Systems Analyst experience working with a secrets management solution within complex ICT environments - preferably HashiCorp Vault. Response should consider experience with secrets managements concepts such as authentication methods, system integrations and configuration of a secrets management solution to support stakeholder needs.
• Demonstrated technical Systems Analyst experience working across a broad range of capabilities, such as DevSecOps, CI/CD, Applications, Infrastructure, Security, Integration.
• Demonstrated understanding of credential usage in a complex ICT environment, identifying risks relating to the compromise of credentials, and working with stakeholders to propose and implement solutions to mitigate risks.
• Demonstrated experience working with technical and non-technical stakeholders to elicit requirements and support them to adopt a capability or product. Response should consider approach to working with teams onboarding the capability/product as well as best practices and lessons learned from prior implementations.
• Demonstrated experience developing and documenting system specifications and modelling (e.g. UML and BPMN) in consultation with technical stakeholders.
• The Department has a complex ICT environment. Please describe your strategy to quickly upskill in our environment, technologies and projects.
Aboriginal and Torres Strait Islander Peoples are encouraged to apply.
To apply please click apply or call Jericho Martinez on 61 3 8628 2103 for a confidential discussion.
