IAM Engineer

Hollard Insurance Australia; Sydney, Melbourne, Brisbane; Hybrid; AUD 120,000 - 180,000; Full time

Job summary

Hollard Insurance Australia in Australia’s major cities seeks an IAM Engineer to own and mature identity and access controls within a hybrid Microsoft environment. You’ll be the technical authority for Entra ID, PIM, conditional access and JIT/JEA, operating under an identity-first Zero Trust strategy.

This hands-on role collaborates with IAM, infrastructure, security operations and architecture teams to reduce standing privilege and minimize identity attack surfaces, while aligning with APRA

Qualifications

• Hands-on expertise in identity and access controls.
• Experience designing Just-In-Time and Just-Enough-Access models.
• Knowledge of Zero Trust concepts and least-privilege design.

Responsibilities

• Design, implement and continuously tune Conditional Access policies enforcing identity-first Zero Trust.
• Own Entra Privileged Identity Management (PIM) including role design, activation policies and access reviews.
• Administer hybrid identity infrastructure (AD DS, Entra Connect, device join, Group Policy).
• Collaborate with SailPoint and BeyondTrust SMEs to deliver lifecycle, entitlement modelling and PAM controls.
• Support audits including APRA CPS 234 with evidence of design and operating effectiveness.

Skills

Conditional Access

PIM

Identity Protection

Entra Connect / hybrid identity

Tools

SailPoint

BeyondTrust

BloodHound

Microsoft Entra ID

Microsoft Defender for Identity

Group Policy

Intune

Active Directory

Job description

• A great opportunity to work with one of Australia’s largest general insurers
• Open to Sydney, Melbourne and Brisbane candidates
• Hands on IAM role to create an immediate impact with 12 Month Max Term opportunity

About Hollard

Hollard Insurance is part of the Hollard Group of Companies and one of Australia’s largest general insurers Australia and New Zealand. We underwrite a broad range of general insurance products, including motor, home, contents, business, bicycle and pet, in proud partnership with some of Australia's biggest consumer brands and broker businesses. As an independent and privately owned company, we believe we can go further together – for our people, customers, communities and partners – through an innovative approach to providing insurance.

Our state-of-the-art facilities in North Sydney reflect our commitment to providing innovative workspaces that support hybrid and remote work.

Your Team

You will join the Identity & Access Management team within Cyber Security Operations, reporting to the Team Lead – Security Engineering.

We are an APRA-regulated insurer operating a hybrid Microsoft environment across Microsoft 365, Azure, Entra ID, Intune, Group Policy and on-premises Active Directory. Beyond Microsoft, our core IAM toolset includes SailPoint (identity governance), BeyondTrust (privileged access management), BloodHound (AD/Entra attack-path analysis), Microsoft Defender for Identity, and Silverfort (identity threat protection and legacy protocol enforcement). Identity and access controls in this environment must meet APRA CPS 234 expectation

Your Role

As a IAM Engineer, you own and mature identity and access management controls across our hybrid Microsoft environment. You will be a technical authority for Microsoft Entra ID, Conditional Access, Privileged Identity Management (PIM), and Just-In-Time / Just-Enough-Access (JIT/JEA), operating within an identity-first Zero Trust strategy.

This is a hands‑on engineering role within the Identity & Access Management team, supporting IAM end to end – from Microsoft identity through to identity governance and privileged access management. You will work closely with your IAM colleagues, as well as infrastructure, security operations and architecture, to reduce standing privilege and minimise our identity attack surface

Your duties and responsibilities

• Design, implement and continuously tune Conditional Access policies that enforce identity-first Zero Trust principles across users, devices, applications and workloads.
• Own Microsoft Entra Privileged Identity Management (PIM) – role design, activation policies, approval workflows and access reviews for Just-In-Time privileged access.
• Administer hybrid identity infrastructure, including Active Directory Domain Services, Entra Connect / Cloud Sync, hybrid device join, and Group Policy.
• Partner with IAM SailPoint and BeyondTrust SMEs to deliver identity lifecycle, entitlement modelling, access certification and PAM controls across Microsoft and on-premises systems, supporting least-standing-privilege outcomes.
• Support internal and external audits, including APRA CPS 234, with evidence of control design and operating effectiveness.

About You

• Deep, hands‑on expertise, including Conditional Access, Privileged Identity Management (PIM), Identity Protection and Entra Connect / hybrid identity.
• Practical experience designing and implementing Just‑In‑Time and Just‑Enough‑Access models.
• Solid understanding of identity‑first Zero Trust architecture and least‑privilege and least-standing-privilege principles.
• Experience with joiner/mover/leaver processes, provisioning and de‑provisioning, and entitlement/access reviews.
• Standout stakeholder management skills, with the ability to understand other technology teams ways of working
• Experience with SailPoint (Identity Security Cloud / IdentityNow or IdentityIQ) for identity governance and lifecycle, and BeyondTrust (Password Safe / Privileged Remote Access) or similar PAM platforms is preferred

Working at Hollard

At Hollard, you'll discover an environment where you can truly make an impact. We offer the best of both worlds – the opportunity, agility and creativity of a company growing with scale, alongside a focus on becoming a catalyst for enduring, positive, social change.

We're a tight‑knit team, where authentic voices and unique perspectives matter. We work supportively, collaboratively and inclusively to help shape our future and create shared value for our communities.

Hollard proudly promotes flexible work including remote work, non‑traditional work patterns, and work‑family balance. We're also unapologetically committed to creating a workplace that values your diversity with a true sense of inclusion. We actively seek to hire for your different lived experiences, including as it relates to disability, ethnicity, faith, Aboriginal and Torres Strait Islander Peoples, gender diversity, sexual orientation, age, neurodiversity.

We're building something special. Working closely with our industry partners to reshape insurance for the better, we're people changing insurance.

A full background check will be completed on the successful applicant.

Australian work rights are required for this position.

Visit the Hollard careers page to learn about how Hollard will collect, store and handle your personal information.

We are NOT engaging Recruitment Agencies for this role and ask agencies to respect our policy of no unsolicited contact regarding advertised vacancies.