IAM Engineer - Hybrid/Remote, 12-Month Contract

Hollard Insurance; North Sydney; Hybrid; AUD 120,000 - 150,000; Full time

Job summary

Hollard Insurance is seeking an IAM Engineer to own and mature identity and access management across a hybrid Microsoft environment, reporting into Security Engineering. This hands-on role supports Entra ID, Conditional Access, PIM and Just-In-Time access within a Zero Trust framework.

You will collaborate with IAM SailPoint and BeyondTrust teams, ensure compliance with APRA CPS 234, and partner with infrastructure, security operations and architecture to reduce standing privileges.

Qualifications

• Deep hands-on expertise in identity and access management.
• Experience with Just-In-Time and Just-Enough-Access models.
• Understanding of identity-first Zero Trust architecture and least-privilege principles.
• Experience with joiner/mover/leaver provisioning and entitlement reviews.
• Experience with SailPoint and BeyondTrust is preferred.

Responsibilities

• Design, implement and tune Conditional Access policies across users, devices, apps and workloads.
• Own Microsoft Entra Privileged Identity Management (PIM) – design, activation policies, approval workflows and access reviews.
• Administer hybrid identity infrastructure (Active Directory, Entra Connect, hybrid device join, Group Policy).
• Partner with IAM SailPoint and BeyondTrust SMEs to deliver identity lifecycle and PAM controls.
• Support audits, including APRA CPS 234, with evidence of control design and operating effectiveness.

Skills

Conditional Access

Privileged Identity Management

Identity Protection

Zero Trust

Just-In-Time Access

Entra Connect

Hybrid identity

Tools

SailPoint

BeyondTrust

BloodHound

Microsoft Defender for Identity

Silverfort

Entra ID

Job description

Hollard Insurance is seeking an IAM Engineer to own and mature identity and access management across a hybrid Microsoft environment, reporting into Security Engineering. This hands-on role supports Entra ID, Conditional Access, PIM and Just-In-Time access within a Zero Trust framework.

You will collaborate with IAM SailPoint and BeyondTrust teams, ensure compliance with APRA CPS 234, and partner with infrastructure, security operations and architecture to reduce standing privileges.