Open To Work
Lachlan White
Heidelberg Heights,Australia
Work Preference
Summary
Lead Security and Solutions Architect specializing in translating complex digital roadmaps into actionable solutions. Proven track record in designing integrated security frameworks and enhancing operational readiness across cloud and hybrid environments, with a focus on identity services, API design, and DevSecOps integration.
Overview
23
23
years of professional experience
Work History
Lead Security and Solutions Architect
Astralas
09.2022 - Current
- Managed application and service integrations, translating digital roadmaps into implementable solution architectures to enhance operational alignment.
- Led technology/platform evaluation and selection, including cloud services, middleware, and security tools.
- Designed and integrated DevOps/DevSecOps pipelines embedding automation, monitoring, and operational controls.
- Reviewed cloud security solutions for vulnerability management and attack-path remediation, strengthening security posture across Protected Health Information environments.
- Authored patterns for secure third-party/SaaS consumption and secure web service presentation from Azure and on-premise.
- Performed threat modelling and risk assessments on existing and proposed solutions, including third-party risk.
- Engaged as Lead Security and Solutions Architect for a major health company, delivering strategic insights and reporting directly to Managing Director.
- Achievements: Led end-to-end Defender Endpoint/ServiceNow/Splunk integration; authored CyberArk PAM designs; led Azure security posture assessment and target-state roadmap; delivered Palo Alto IoMT designs; produced reference architectures accelerating delivery time to market.
Security Architect (Identity & Access Management)
eB2Bcom
03.2019 - 08.2022
- Authored RFP and use-case framework for major University Cyber Security Operational Uplift (SIEM, Vulnerability Management, Incident Response), facilitating onboarding of selected MSSP; created Kubernetes Security Adoption Artifact against CIS Benchmarks; unified identity platforms with 100-point identity verification and XACML v3.0 authorization.
- Consulted on PAM solutions, including RBAC, privileged identity monitoring, just-in-time access, and behavior analytics.
- Presented cloud security solutions covering threat assessment and remediation across VMs, storage, containers, and serverless.
- Designed and deployed security solutions with multiple specialized security vendors to enhance AWS vulnerability management and remediation.
- Provided security, identity, and messaging solutions to Asia Pacific markets, reporting directly to the CEO.
Security Architect
Zimbani
03.2018 - 12.2018
- Developed security frameworks and patterns to ensure client compliance; conducted security policy and compliance audits to identify gaps and enhance security posture.
- Designed vendor-neutral security architecture for client networks, infrastructure, and workplace environments to support secure operations.
- Architecture consulting firm, reporting to the Chief Strategy Officer.
- Achievements: Created an enterprise AWS migration strategy for a wagering firm (executive-approved); delivered CCTV security architecture across 120+ sites for a telco; produced executive-approved security roadmaps for a University and an insurance firm.
Security Architect
Tabcorp Limited
10.2010 - 03.2018
- Lead Security Architect liaising with third-party operators and vendors on network, infrastructure, and application security.
- Consolidated network security infrastructure from 100+ devices to six, designed and deployed WAF/DDoS perimeter strategy across data centres, obtained VCGLR approval for Darwin's SDC Data Centre hosting, led architecture for SIEM, SSO, and Remote Access initiatives, and presented 'Secure Electronic Access and Distribution of Board Reports' to Tabcorp Board.
- Managed firewall reviews, DMZ/internal network architecture, and secure code builds through penetration testing, enhancing security posture.
- Embedded industry-standard security principles and ensured alignment to ISO 27001, VCGLR, and PCI-DSS.
- ASX-listed wagering, gaming, and media organisation; role spanned Information Security and Strategy & Architecture units, reporting to the CISO.
Solutions Architect
eB2Bcom
08.2003 - 10.2010
- Provided specialized security, identity, and messaging solutions to government, defense, and corporate sectors across Asia Pacific.
- Led technical ownership of security tender responses and IAM consulting, driving pre-sales efforts for security product suites.
- Coordinated PoC programs for education, government, and corporate verticals, enhancing stakeholder engagement and product validation.
- Achievements: Delivered engagements for the ATO, DFAT, ABS, Department of Treasury, and Fiji Ministry of Home Affairs; brought in key clients including Toll Holdings and RWWA; certified Utimaco security consultant.
Education
Diploma of Business / Information Systems -
Royal Melbourne Institute of Technology (RMIT)
Melbourne, Australia01-2003
Skills
- Solution Architecture
- DevSecOps integration
- Cloud security
- API architecture
- Identity and Access Management
- Identity provisioning
- Vulnerability remediation
- Threat modeling
- Risk assessment
- Security operations
- Network & Platform Security
- Compliance
- Security and compliance
- Serverless architecture
- Technical consulting
- Cloud computing expertise
Accomplishments
- Led end-to-end solution architecture for Microsoft Defender Endpoint integration with ServiceNow Vulnerability Response, Active Directory, and Splunk, enabling automated vulnerability workflows and security event visibility.
- Authored detailed CyberArk solution designs covering privileged access management, onboarding, and SIEM-integrated operational controls.
- Delivered Palo Alto IoMT security designs, including network segmentation, threat prevention, and device visibility.
- Designed ABAC models aligned to XACML v3.0, enabling dynamic, context-aware access decisions across enterprise applications.
- Conducted AI security assessments across MCP implementations, LLMs, agentic AI, and prompt-based models, documenting threat vectors and mitigation controls.
- Rated AI-specific risks (prompt injection, model manipulation, data exfiltration, unauthorised tool invocation) and mapped these to governance requirements.
- Led Azure current-state security posture assessment and multiyear roadmap for an enterprise health organisation.
- Created an enterprise AWS migration strategy for a wagering firm, approved by the executive.
- Delegate for Cyber Security on Architecture Working Group and ARB; aligned practices to NIST CSF 2.0 and Australian Privacy Principles.
- Consolidated Tabcorp's network security infrastructure from 100+ devices to six, driving major cost savings.
Technical Strengths
End-to-end design across on-premise, AWS, Azure, GCP, and hybrid environments, aligned to DevOps/DevSecOps models, CyberArk PAM, IAM/IDAM, RBAC/ABAC, XACML v3.0, SSO, just-in-time access, DMZ architecture, Palo Alto, Cisco ACI, F5/Akamai WAF, IDS/IPS, Microsoft Defender, IoMT security, API management, event-driven integrations, reference architectures, multi-region HA design, Splunk SIEM, threat modelling, third-party risk assessments, ARB governance, NIST CSF 2.0, MITRE, ISO 27001, PCI-DSS, VCGLR, Australian Privacy Principles
Accreditations
- Architecture AWS, 2017
- Security Architecture AWS, 2017
- Algosec Firewall Analyzer Administration, 2017
- Cisco ACI: Architecture and Deployment, 2015
- F5 ASM Installation & Configuration, 2011
- Centrify Advanced Application Training, 2009
- Radiant Logic Installation, Configuration and Presales, 2009
Timeline
Lead Security and Solutions Architect
Astralas
09.2022 - Current
Security Architect (Identity & Access Management)
eB2Bcom
03.2019 - 08.2022
Security Architect
Zimbani
03.2018 - 12.2018
Security Architect
Tabcorp Limited
10.2010 - 03.2018
Solutions Architect
eB2Bcom
08.2003 - 10.2010
Diploma of Business / Information Systems -
Royal Melbourne Institute of Technology (RMIT)