Cybersecurity Systems Lead

Randstad Pty; Melbourne; On-site; AUD 200,000 - 260,000; Full time

Job summary

Randstad Pty is hiring a Security Systems Lead for Identity & Access Platforms in Melbourne. You will own the enterprise identity stack, including Okta federation, Entra ID, SailPoint/Saviynt IGA, and CyberArk PAM, while driving Zero Trust policy enforcement and audit readiness.

You will lead incident analysis, governance for access reviews, and the delivery of secure, compliant identity solutions across a regulated financial services environment.

Qualifications

• 5+ years engineering experience with Okta and Entra ID.
• 3+ years configuring IGA solutions for UAR and entitlement management.
• Hands-on PAM controls via CyberArk or Entra PIM.
• Automation using SCIM, REST APIs, PowerShell, Okta Workflows or Workato.
• Understanding APRA CPS 234 and ISO 27001 standards.
• Experience in regulated Australian financial services.
• Desirable: Okta/CyberArk/SailPoint certifications.

Responsibilities

• Platform ownership and engineering of enterprise identity suite (Okta/Entra ID federation, SailPoint/Saviynt IGA, CyberArk PAM).
• Governance and user access reviews tooling and quarterly certification campaigns.
• Provide evidence for APRA CPS 234 and ISO 27001 audits and remediation.
• Tier-3 escalation for identity incidents and complex log analysis across tenants.
• Design and deploy Conditional Access policies and Entra PIM configurations.
• Produce operational metrics and dashboards for leadership and security committees.

Skills

Okta & Entra ID engineering

IGA configuration

PAM implementation

Automation & integrations

Zero Trust & CA concepts

APRA CPS 234 / ISO 27001

Financial services industry (AU)

IAM certifications (desirable)

Education

Bachelor's degree in Information Technology

Tools

Okta

Microsoft Entra ID (Azure AD)

CyberArk PAM

SailPoint IdentityNow/IdentityIQ

Saviynt

Okta Identity Governance

Entra PIM

SCIM

REST APIs

PowerShell

Okta Workflows

Workato

Job description

Job Title: Security Systems Lead - Identity & Access Platforms
Location: Melbourne

Role Overview

Opportunity to join a leading financial services organization to lead the engineering, operational health, and continuous automation of enterprise Identity and Access Management (IAM) platforms. Operating within a highly regulated environment, this role oversees Okta and Microsoft Entra ID architectures and CyberArk privileged access management. You will bridge the gap between technical execution and Information Security strategy, driving automated Zero Trust access policies, and APRA CPS 234 / ISO 27001 audit remediation.

Key Criteria

• Authentication & Federation: 5+ years of hands-on engineering experience across Okta (as Primary IdP) and Microsoft Entra ID (Azure AD), including federated configurations, SAML 2.0, OIDC, OAuth 2.0, and WS-Federation protocols.

• Identity Governance & Administration (IGA): 3+ years of experience configuring and operating IGA solutions (SailPoint IdentityNow/IdentityIQ, Saviynt, or Okta Identity Governance) for User Access Reviews (UAR) and entitlement management.

• Privileged Access Management (PAM): Direct hands-on experience implementing and maintaining PAM controls via CyberArk, Entra PIM, or equivalent tools.

• Automation & Integration: Proven capability building identity integrations using SCIM, REST APIs, PowerShell, or workflow engines (Okta Workflows, Workato) to automate JML processes and reduce offboarding SLAs.

• Regulatory & Compliance Knowledge: Practical understanding of APRA CPS 234 and ISO 27001 standards, with demonstrated experience translating security policies into technical controls and audit evidence.

• Security & Network Concepts: Exposure to Zero Trust Architecture, Conditional Access Policies, least privilege access enforcement, and Tier-3 root-cause authentication log analysis across cloud environments.

• Industry Background: Prior experience in regulated Australian financial services (Banking preferred)

• Target Certifications (Desirable): Okta Certified Administrator/Consultant, Microsoft Certified: Identity and Access Administrator Associate (SC-300), SailPoint Certified Engineer, CyberArk Defender/Sentry, or CISSP/CISM.

Key Relationships

• Manager Enterprise Architecture, Data & Engineering (Direct Reporting Line)

• Information Security IAM Manager & Security Architecture Teams

• Enterprise Architecture, Application Support, and Digital Engineering Teams

• Internal Risk, Compliance, Internal Audit, and External Audit Stakeholders

Key Responsibilities

• Platform Ownership & Engineering: Own the technical implementation, configuration, and operational health of the enterprise identity suite, including Okta / Entra ID federation, SailPoint/Saviynt IGA, and CyberArk PAM infrastructure.

• Governance & Access Reviews: Support and maintain User Access Review (UAR) tooling and quarterly certification campaigns, ensuring rapid and auditable access revocation.

• Compliance & Security Assurance: Gather and deliver technical evidence for APRA CPS 234 and ISO 27001 compliance audits, ensuring timely remediation of all identity-related findings.

• Incident Escalation & Root Cause Analysis: Act as the Tier-3 escalation point and technical authority for identity authentication incidents, carrying out complex log analysis across Okta and Entra ID tenants.

• Zero Trust Policy Enforcement: Design, test, and deploy Conditional Access Policies, Adaptive MFA, and Entra PIM configurations in alignment with Information Security strategy.

• Metrics & Platform Health: Produce structured operational metrics and dashboards covering platform reliability, capacity, and risk indicators for leadership and security committees.

At Randstad Digital, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.

Experience

5 years

Qualification

• Bachelor's degree (Information Technology
• etc)