Network Architect

LH-07704

12 months

EL1 equivalent

You'll define, govern and evolve the Australian Criminal Intelligence Commission's enterprise network architecture across on-premises, cloud-connected and hybrid environments, making sure network services stay secure, scalable, resilient and supportable. Working within the Network Operations team, you'll translate business, security and technology requirements into network capabilities, designs and implementation roadmaps. You'll develop architecture patterns and standards, provide technical governance and assurance across projects and operational initiatives, and lead or contribute hands-on to the implementation of complex network capabilities where specialist expertise is needed. The environment is a complex multi-vendor one. The Network Operations team looks after Fortinet security platforms (firewalling, privileged access management, sandbox and management platforms), enterprise routing and switching, network security platforms, load balancing and application delivery, virtualised network products, cloud networking and hybrid connectivity, LAN, MAN and WAN environments, carriage circuits, network monitoring and observability, and network automation and orchestration including Ansible. You'll work closely with business stakeholders, project teams, security practitioners, architects and operational support teams, combining strategic architecture with technical leadership so that network solutions are delivered well and can be supported in operation. Before commencement you'll need to obtain the ACIC's Organisational Suitability Assessment (OSA).

• Develop and maintain enterprise network architecture, standards, patterns and roadmaps • Translate business, security and operational requirements into network capabilities and solution designs • Lead the design and implementation of strategic network initiatives and complex technical changes • Produce high-level and detailed network designs and implementation guidance • Act as the technical lead for complex network projects and technology refresh activities • Provide architecture assurance and technical governance across projects and operational initiatives • Define and implement network security architectures in accordance with the ISM, PSPF and Essential Eight • Drive improvements in network resilience, security, monitoring, automation and operational supportability • Guide technology lifecycle management, capacity planning and network modernisation activities • Maintain strong technical knowledge through hands-on engagement with enterprise network technologies • Engage with stakeholders at all organisational levels to develop and communicate technical solutions

Hybrid. Primarily onsite in the Canberra office. Working remotely up to two days per week may be negotiated after six months, subject to approval and the ACIC Home Based Work Policy.

1. Enterprise network architecture Demonstrated experience developing enterprise network architectures and translating them into implemented outcomes within large and complex ICT environments. 2. Network security architecture and Fortinet Demonstrated high-level expertise designing and implementing enterprise network security architectures, including significant experience with Fortinet technologies and services, within a complex multi-vendor environment. 3. Complex network solutions Demonstrated experience leading the design and implementation of complex network solutions across routing, switching, security, load balancing, WAN and cloud-connected environments. 4. Commonwealth security frameworks Demonstrated experience applying Commonwealth security frameworks, including the ISM, PSPF and Essential Eight, to network architecture, design and implementation activities. 5. Technical leadership and governance Demonstrated ability to provide technical leadership, architecture governance and design assurance across multiple concurrent initiatives while maintaining alignment with operational requirements. 6. Communication and stakeholder engagement Demonstrated highly developed communication and stakeholder engagement skills, including the ability to influence technical and non-technical stakeholders and produce high-quality architecture and design artefacts.

1. Azure cloud networking Experience designing and governing cloud networking architectures within Microsoft Azure environments. 2. Automation and infrastructure as code Experience with network automation, infrastructure as code and orchestration technologies. 3. Zero Trust and architecture governance Experience with Zero Trust architectures, network segmentation and contemporary security design patterns. Experience supporting architecture governance forums, design authorities and technology standards development. 4. Certifications and government experience Relevant industry certifications such as Fortinet NSE/FCP, CCDE, CCNP/CCIE, F5-CA, Azure Solutions Architect or equivalent. Experience in Commonwealth Government or similarly regulated environments.

Each candidate must provide a written response to each of the six essential criteria. Each response cannot be more than 3000 characters. Responses to the desirable criteria are encouraged where you have relevant experience. Structure each response using the STAR format (Situation, Task, Action, Result). Sell your capability rather than listing duties: describe the environment, what you were responsible for, what you did and the measurable outcome. Target the specific criterion, for example name the Fortinet platforms you designed and the ISM, PSPF and Essential Eight controls you applied, and quantify scale (sites, users, vendors, projects) wherever you can.