IAM Engineer — Zero Trust & PIM (12-Month Contract)

Hollard Insurance Australia; Sydney, Melbourne, Brisbane; Hybrid; AUD 120,000 - 180,000; Full time

Job summary

Hollard Insurance Australia in Australia’s major cities seeks an IAM Engineer to own and mature identity and access controls within a hybrid Microsoft environment. You’ll be the technical authority for Entra ID, PIM, conditional access and JIT/JEA, operating under an identity-first Zero Trust strategy.

This hands-on role collaborates with IAM, infrastructure, security operations and architecture teams to reduce standing privilege and minimize identity attack surfaces, while aligning with APRA

Qualifications

• Hands-on expertise in identity and access controls.
• Experience designing Just-In-Time and Just-Enough-Access models.
• Knowledge of Zero Trust concepts and least-privilege design.

Responsibilities

• Design, implement and continuously tune Conditional Access policies enforcing identity-first Zero Trust.
• Own Entra Privileged Identity Management (PIM) including role design, activation policies and access reviews.
• Administer hybrid identity infrastructure (AD DS, Entra Connect, device join, Group Policy).
• Collaborate with SailPoint and BeyondTrust SMEs to deliver lifecycle, entitlement modelling and PAM controls.
• Support audits including APRA CPS 234 with evidence of design and operating effectiveness.

Skills

Conditional Access

PIM

Identity Protection

Entra Connect / hybrid identity

Tools

SailPoint

BeyondTrust

BloodHound

Microsoft Entra ID

Microsoft Defender for Identity

Group Policy

Intune

Active Directory

Job description

Hollard Insurance Australia in Australia’s major cities seeks an IAM Engineer to own and mature identity and access controls within a hybrid Microsoft environment. You’ll be the technical authority for Entra ID, PIM, conditional access and JIT/JEA, operating under an identity-first Zero Trust strategy.

This hands-on role collaborates with IAM, infrastructure, security operations and architecture teams to reduce standing privilege and minimize identity attack surfaces, while aligning with APRA