IAM Engineer - CIAM

TAL Limited; Sydney; On-site; AUD 110,000 - 170,000; Full time

Benefits offered by this job

Flexible work options

Learning and development

Life insurance

Wellbeing programs

Parental leave

Employee discounts

Job summary

TAL Careers is seeking an IAM Engineer focused on Customer Identity and Access Management (CIAM) to design, build and operate identity services on Okta. You’ll apply SecDevOps practices, automate deployments, and push towards Zero Trust across cloud platforms and third‑party services.

You will work closely with IAM Engineering Lead to identify gaps, implement automated controls and uphold regulatory requirements while delivering a secure and reliable customer identity experience.

Qualifications

• 3+ years in Identity and Access Management or Cyber Security engineering.
• Hands-on with Okta or similar CIAM platform.
• Strong knowledge of OAuth 2.0, OpenID Connect, SAML and MFA.
• Experience with CI/CD pipelines and infrastructure as code.

Responsibilities

• Build and support CIAM services across registration, authentication and lifecycle journeys.
• Engineer secure identity solutions and integrate applications, APIs and partners.
• Drive automation with CI/CD pipelines and Terraform-based infrastructure.
• Improve identity controls to reduce fraud and address audit findings.
• Collaborate with Security, Risk, Digital and Technology teams for reliability and UX.

Skills

Okta CIAM

Identity security

Python

JavaScript/TypeScript

Terraform

CI/CD

OAuth 2.0

OpenID Connect

Git

APIs

Tools

Git

APIs

Job description

IAM Engineer - CIAM# TAL Careers## IAM Engineer - CIAMApply: Sydney: Full time: Posted Today: End Date: November 27, 2026 (15 days left to apply): R-21695Permanent Opportunity Welcome to TAL. As a leading life insurer, we’ve been protecting Australians for over 150 years. Backed by Daiichi Life, we're driven by big ambitions and empower to create better products and services. Together with our Partners, we’re helping millions of Australians live a life filled with choices, options, and freedoms. See the direct impact you make delivering support and financial security with care and expertise. Grow beyond expectations with diverse roles, global connections, and exclusive learning opportunities. Work with passionate, bright and capable colleagues. Feel inspired by supportive leaders. Collaborate with heart, where flexibility, wellbeing and inclusivity is valued. Together, we're reimagining insurance. Bring your curiosity, ambition and unique perspective, and help us continue reimagining insurance through innovative thinking, digital capability and a commitment to better outcomes for the people who depend on us. **Job Description** The IAM Engineer – Customer Identity and Access Management (CIAM) is responsible for the hands-on design, development, automation and operational support of TAL’s customer identity services built on Okta. The role applies SecDevOps practices, including coding, automation, CI/CD and infrastructure as code, to deliver reliable and seamless identity capabilities across digital platforms, cloud environments and third-party services. Working closely with the IAM Engineering Lead, the role identifies control gaps, develops automated solutions and drives continuous improvement to ensure customer identity services remain secure, sustainable and aligned with business, customer experience and regulatory requirements. **In this role you will:*** Build and support CIAM services: Design, configure and support TAL’s Customer Identity and Access Management capabilities, including Okta, across customer registration, authentication, account recovery and identity lifecycle journeys.* Engineer secure identity solutions: Develop and maintain secure application, API and partner integrations, applying authentication, authorisation, federation and Zero Trust principles.* Drive automation and engineering excellence: Build automation, CI/CD pipelines and infrastructure as code using tools such as Terraform to improve efficiency, consistency and reliability.* Strengthen identity security and controls: Assess and improve customer identity controls to protect customer information, reduce fraud and account takeover risk, and address control deficiencies and audit findings.* Optimise and continuously improve CIAM: Diagnose complex technical issues, enhance Okta security capabilities and work across Security, Risk, Digital and Technology teams to improve the security, reliability and customer experience of CIAM services. **Qualifications:*** 3+ years’ experience in Identity and Access Management, Customer Identity and Access Management, or Cyber Security engineering, ideally within a customer-focused environment.* Hands-on experience with Okta or an equivalent CIAM platform, including authentication, customer identity lifecycle management and modern identity security capabilities.* Strong knowledge of identity and authentication standards, including OAuth 2.0, OpenID Connect, SAML, multi-factor authentication and Zero Trust principles.* Strong coding and automation capability, using languages such as Python, JavaScript/TypeScript or Java, with experience building APIs, integrations and identity automation.* Experience with modern SecDevOps practices, including CI/CD pipelines, infrastructure as code such as Terraform, Git-based version control and automated testing. **Benefits** At TAL, we're committed to helping our people thrive both professionally and personally. Depending on your role and eligibility, benefits may include: * Flexible and blended ways of working that support your work and personal commitments.* Access to learning, leadership development programs, LinkedIn Learning and global career opportunities through the Daiichi Life Group.* TAL-funded Life, Income Protection and Total & Permanent Disability insurance, plus employee insurance discounts.* Wellbeing support including Employee Assistance Program services, wellbeing resources, annual flu vaccinations and health initiatives.* Additional leave benefits including paid parental leave, wellbeing leave, community leave and purchased leave options.* Access to TAL Rewards Plus, offering discounts at hundreds of popular retailers and services. **Our Commitment to Inclusion** We're proud to be recognised as an **Employer of Choice for Gender Equality** and maintain partnerships with organisations including **Diversity Council Australia, Australian Disability Network** and **Pride in Diversity**. Through our**Innovate Reconciliation Action Plan**, we're also committed to building meaningful relationships, creating opportunities and contributing to positive outcomes for Aboriginal and Torres Strait Islander peoples. We welcome applications from people with diverse experiences, perspectives and backgrounds and are committed to providing an inclusive recruitment experience for all candidates. Need adjustments during the recruitment process? Let our team know by getting in touch with us here we’re here to support you. *If you are already a TAL employee, please apply via the Jobs Hub in Workday. This is important to ensure that your application is recorded accurately.*