Our client is a large Australian organisation that is a leader in their field. The work culture is collaborative and supportive of each other. They look after their people and provide some of the best benefits, workspaces, and facilities in the industry.
About the Role:
The IAM Engineer is responsible for the management of IAM landscape. As part of the maturity journey, a focus on identity and access management and building the framework of business processes, policies and technologies that facilitates the management of electronic or digital identities will be critical.
Responsibilities:
- Oversee and enhance security controls for Azure Active Directory (Azure AD), Active Directory, and Privileged Access Management (PAM), ensuring strict enforcement of least privilege access across diverse systems and user scenarios.
- Collaborate closely with cross-functional teams to design and deliver Identity and Access Management (IAM) solutions tailored to meet specific business objectives.
- Partner with Security Architects and Cybersecurity teams to identify, evaluate, and implement cutting-edge IAM technologies aligned with organizational security policies and strategic goals.
- Develop, document, and socialize comprehensive IAM policies, processes, and technologies to ensure alignment with security best practices and compliance requirements.
- Lead initiatives to streamline user onboarding and offboarding processes, driving adoption of advanced access management solutions such as single sign-on (SSO), federated identities, multi-factor authentication (MFA), and privileged account management.
- Manage the full lifecycle of identity and access, including provisioning, periodic access reviews, and the deployment of modern authentication mechanisms like SSO, PAM, and MFA.
- Administer and configure Privileged Access Management (PAM) solutions to safeguard critical systems and data.
- Support audits and assessments by collaborating with the Senior Security Engineer for Threat and Vulnerability Management (TVM) to identify user-related vulnerabilities and assess risk levels.
- Establish a robust governance framework for access control, ensuring clear guidelines and standards for managing user permissions and access rights.
Skills and Experience:
- Over 6 years of hands-on expertise with leading IAM technologies, including SailPoint, ServiceNow, Quest One Identity Manager, Okta (SSO), Thycotic, BeyondTrust (PAM), Multi-Factor Authentication (MFA), and both on-premises and Azure Active Directory.
- In-depth knowledge of federated identity systems, directory services, and advanced access control mechanisms such as role-based access control (RBAC), SSO, and MFA, along with proficiency in related standards like SAML, OAuth, NTLM, LDAP, Kerberos, and KPI.
- Extensive experience with Public Key Infrastructure (PKI) and Azure Key Vault, ensuring secure encryption key management and certificate handling.
- Strong understanding of security frameworks, including ASD Essential 8 and NIST CSF2/NIST 800-53, to implement robust compliance and cybersecurity measures.
- Skilled in ITIL frameworks and IT Service Management to enhance operational efficiency and service delivery.
- Proven experience in establishing Azure security practices, including DevOps and DevSecOps strategies for secure and efficient application deployment.
- Skilled at incident response coordination, ensuring swift and effective mitigation of security threats.
- Valuable experience in Operational Technology (OT) security, enhancing the protection of critical systems in industrial and infrastructure environments.
For a confidential discussion, please contact Pravin on Pravin.manandhar@peoplebank.com.au quoting reference 264264.
''
