Enterprise Security Architect

An exciting opportunity as an Enterprise Security Architect is now available. This role is a full-time permanent position based in our Wellington Customhouse.

About this role | Mō tēnei tūranga mahi

The role of the Enterprise Security Architect is to design and implement secure technology solutions that align with business objectives. Oversees security architecture across the solution lifecycle—from concept and risk analysis to implementation and transition to operational support.

The Security Architect acts as a strategic advisor on security standards, governance, and emerging threats, ensuring compliance and resilience in enterprise systems.

This position is a permanent position within the Digital and Technology Cyber Security Team with specialist knowledge, skills, and expertise. This role focuses on developing and delivering a robust security strategy by designing and implementing advanced security controls across our core network infrastructure and Microsoft Azure/M365 platforms. You’ll ensure alignment with the New Zealand Information Security Manual (NZISM), Protective Security Requirements (PSR), and Customs policies.

The Enterprise Security Architect will operate at both a strategic planning and technical implementation level, with strong skillsets in Microsoft Azure/M365 security configuration and optimization and working with Enterprise and Solution architects to deliver stable and secure systems for the organisation.

To be successful as Enterprise Security Architect, the appointee requires the following knowledge, experience, skills, qualifications and/or personal attributes:

• Development and delivery of security solutions with an emphasis hands-on experience configuring security controls for Cloud architecture solutions and on-premises business systems in complex Enterprise organisations; with particular focus on Microsoft Azure and M365
• Technical competency and experience with Microsoft cloud security suite of tools to include Defender, InTune, Sentinel, and Entra ID
• Experience developing advanced queries using Microsoft’s Kusto Query Language (KQL) for creating and updating alerts and threat detection rules in Microsoft’s Defender suite.
• Experience creating and managing Conditional Access within Microsoft Azure.
• Demonstrable knowledge with emergent technologies such as Microsoft’s Copilot Artificial Intelligence tools.
• Knowledge of the New Zealand Information Security Manual (NZISM), Australian Signals Directorate Essential 8, MITRE ATT&CK framework, and industry best practice.
• Technical consultancy and presentation skills for business cases including development of feasibility studies, solution and implementation options, and Total Cost of Ownership estimation.
• Demonstrated commitment to ongoing professional development, including maintaining understanding of current and future business and IT trends, policies and practices. Further demonstrated by Leading thought leadership of Cloud in company and participation in external forums.
• Excellent communication skills – both verbal and written with the ability to communicate technical aspects in plain English to a variety of groups.
• Solid interpersonal skills including the ability to quickly establish and maintain strong working relationships by developing trust and credibility.
• A tertiary qualification at least equivalent to bachelor’s and/or relevant industry certifications such as CISSP, CISA, etc
• Be able to attain a New Zealand Government Top Secret National Security Clearance.

Working at Customs | Mahi ki te Mana Ārai o Aotearoa

We aim to create a great place to work, where our people have a sense of belonging and the capability and desire to meet our future challenges. We are an organisation that is clear about our mission, and this is underpinned by Te Pou Tokomanawa (the Foundations) and our Whanonga Pono (Values). Our work really matters to the safety and success of New Zealand.

Working for New Zealand Customs…

To join Customs in any role you must be a New Zealand citizen or New Zealand permanent resident* and be able to obtain and maintain an Organisational Security clearance. This role requires the successful applicant to obtain and maintain security clearance to Top Secret level.

(*) A New Zealand Citizen or New Zealand Permanent Resident who has resided continuously in New Zealand for the last ten years, (including ten years ago from the date of this application) and resides in New Zealand at time of application.

OR

A New Zealand Citizen or New Zealand Permanent Resident who has resided continuously in New Zealand for the last ten years, (including ten years ago from the date of this application) and resides in New Zealand at time of application who has travelled out of New Zealand for short periods of time i.e. < 6 months in one of the following countries: Australia, United Kingdom, United States or Canada and can provide police certificates from those countries for the period of absence.

Because of the nature of Customs’ work you must have a clear Police record. Organisational security clearances are mandatory and are conducted by Customs. You will also be required to pass a drug test.

How to apply…

To apply, please submit an up-to-date CV and cover letter, via our online process. (Please note, we do not accept applications sent directly to an email address).

If you have any specific questions about the role, please contact John Bingham (Manager, Information and Cyber Security) after the 6th of January 2026 at [email protected]

Please note Customs will be managing this recruitment independently in-house and will not be engaging with recruitment agencies at this stage.

Deadline for applications is 11pm, Sunday 18 January 2026.

New Zealand Customs Service | Te Mana Ārai o Aotearoa is a member of Diversity Works New Zealand and is committed to developing a diverse workforce and an inclusive workplace. It provides equal employment opportunities and welcomes applications from everyone who can meet the requirements of the role.Customs | Te Mana Ārai supports flexible working arrangements and welcomes the opportunity to speak with you about your flexible working requirements.