IAM Lead — Enterprise Identity & Access Strategist

Mallesons; Sydney; On-site; AUD 180,000 - 230,000; Full time

Job summary

Mallesons is seeking an IAM Lead within the Technology Infrastructure team to own operational IAM strategy and governance across Microsoft AD, Entra ID, Azure, and PKI. You will lead across BAU operations, uplift projects, and partner with Architecture and Security to implement robust identity controls.

You will guide privileged access, authentication services, and cross‑tenant identity patterns while mentoring teams and driving continuous improvement in a regulated environment.

Qualifications

• 7+ years in identity and access management or cyber security in enterprise environments.
• Experience as a senior or lead IAM engineer in complex secure environments.
• Hands-on with Entra ID and Azure access controls, troubleshooting authentication and provisioning.
• Demonstrated experience implementing AD CS PKI and credential isolation in hybrid setups.
• Experience administering privileged access management platforms, ideally CyberArk.
• Scripting and automation using PowerShell and Graph API.
• Experience with token mechanisms (SAML, OAuth, OIDC, Kerberos).
• Production IAM operations, monitoring, incident management and continual improvement.

Responsibilities

• Own operational health, continual improvement and governance of IAM services.
• Collaborate with Architecture and Security to translate strategy into operational outcomes.
• Lead on identity lifecycle, access reviews and entitlement governance.
• Support audits and control assurance activities relating to IAM.

Skills

IAM expertise

Cyber security

Microsoft Entra ID

Azure access controls

SAML / OAuth / OIDC

Kerberos

PowerShell

Graph API

Automation / IaC

Communication

Education

SC‑300 Identity and Access Administrator

AZ‑500 Azure Security Engineer

AZ‑305 Azure Solutions Architect

Tools

Active Directory

CyberArk

AD CS / PKI

Microsoft 365

Job description

Mallesons is seeking an IAM Lead within the Technology Infrastructure team to own operational IAM strategy and governance across Microsoft AD, Entra ID, Azure, and PKI. You will lead across BAU operations, uplift projects, and partner with Architecture and Security to implement robust identity controls.

You will guide privileged access, authentication services, and cross‑tenant identity patterns while mentoring teams and driving continuous improvement in a regulated environment.