Gateways and Guards Architect

At Thales, we know technology has the ability to make our world more secure, sustainable, and inclusive – and that it’s all driven by human intelligence.

Because it takes human intelligence to build and power the systems and solutions that people depend on every day. So we stay curious and make space for diverse points of view. We share what we know and we challenge what’s possible.

From manufacturing and engineering to cybersecurity and space, we’re driving progress in some of the world’s most important industries – and working together to build a future we can all trust.

Location: Sydney, Melbourne, or Canberra based
 

OUR BENEFITS
In addition to interesting, engaging opportunities that impact at scale, and ongoing personal and professional development opportunities, Thales Cyber can offer you:

• Competitive remuneration structure

• Hybrid and flexible working options under the Thales Flex program

• Paid parental leave and family support through Parents at Work

• The day off on your birthday each year

• Novated Lease options

• Ongoing personal and professional development opportunities

• Sonder – Wellbeing & Support Partner

ABOUT THALES

Thales is a global leader in cybersecurity - no.1 in data security - with 6,000+ experts and developers. We bring trust and resilience to key industries including finance, health, retail and manufacturing, as well as vital sectors such as aerospace, critical infrastructure, defence and space.
 

Thales delivers cybersecurity products and services that keep people and assets safe, giving organisations confidence in the security of their digital journeys. Our solutions are deployed in 148 countries, helping governments to maintain sovereignty, and organisations to preserve their strategic autonomy.

YOUR ROLE
 

You will join the project delivery team under the Project Design Authority to operate across secure enterprise and deployed environments:

• Gather, analyze, and formalize Guard and Gateway requirements with stakeholders, ensuring clarity, traceability, and alignment with FMN and ISM controls.

• Design Guard and Gateway configurations and patterns consistent with FMN, ISM, and Defence information exchange standards.

• Assist in creating configuration artifacts, design documents, and pattern libraries for secure environments.

• Maintain requirements traceability and help develop ISM assessment and accreditation evidence.

• Implement prototype Guard and Gateway setups for validation, testing, and pattern confirmation.

• Contribute to Data-Centric Security policy aligned with STANAG 4774/4778 and ACP 240 metadata and content-handling standards.

• Support threat-protection testing, including content sanitization for mission-edge and cross-domain flows.

• Collaborate with senior Guard specialists, architects, and engineers to ensure design quality, security, and compliance.

YOUR EXPERIENCE

• Strong expertise in Google Distributed Cloud networking and hybrid cloud interconnect architectures.

• Deep understanding of Zero-Trust Networking principles and Kubernetes CNI design, including GKE-on-GDC patterns.

• Proficiency integrating COTS firewalls (e.g., Palo Alto, Fortinet) into private cloud and GDC environments.

• Experience designing or contributing to Defence-ready Guard and Gateway architectures, incorporating FMN, ISM, and ISM assessment and authorisation control expectations.

• Knowledge of Data-Centric Security (DCS) aligned to STANAG 4774/4778 and ACP 240, including metadata-labelling, content release constraints, and sanitisation policies.

• Understanding of CDR technologies as threat-protection mechanisms, and their application at mission-edge and cross-domain enforcement points.

• Experience contributing to requirements analysis, design artefacts, and ISM assessment and authorisation documentation for secure system delivery.

• Applies structured, detail-oriented thinking to technical problem-solving.

• Maintains a strong focus on security, compliance, and risk management in all work products.

AUSTRALIAN DEFENCE ROLES & SECURITY

A Defence security clearance is required for this role; applicants must be Australian citizens and eligible to obtain and maintain an appropriate clearance. An NV1 clearance is preferable.

Additional information with regards to clearances is available from the Australian Government Security Vetting Agency website http://www.defence.gov.au/AGSVA/. In some cases, individuals who hold a current clearance from a foreign government may be eligible to have this clearance recognised by the Australian Government and be eligible for this role. The Australian Defence Trade Controls Act (DTCA) is applicable and as such, your nationality may be a factor in determining your suitability for this role.

#LI-Onsite #LI-RK1

It’s easy to dismiss the perfect opportunity if you don’t see yourself as the perfect fit. If this role feels right – no matter your background or personal circumstances – please introduce yourself or join our community. We’re committed to supporting a diverse workplace, and that starts here.

We’re proud to be endorsed by WORK180 as an Employer for All Women, but we know there’s always more we can do. We’ll continue to foster industry partnerships, employee resource groups (ERGs) and development opportunities to make Thales a genuinely equitable employer, for everyone.

Read more about our WORK180 endorsement.