IAM Security Architect

Randstad; City of Melbourne; Hybrid; AUD 180,000 - 240,000; Full time

Job summary

Randstad is seeking a Security Architect - IAM in Melbourne to lead identity architecture, governance, and Zero Trust strategy across enterprise platforms. You will define reusable security patterns, design end-to-end IAM solution architectures, and embed security-by-design across cloud and hybrid environments.

You will secure non-human identities, mitigate identity-based threats, and drive adoption of core identity controls within complex programs.

Qualifications

• 8+ years of IT solution design, build, or delivery experience, with 5+ years in IT security, IAM, IGA, PAM, and cloud security.
• Expertise with Microsoft Entra ID, Okta, CyberArk or BeyondTrust, SailPoint, Saviynt or One Identity.
• Hands-on knowledge of Zero Trust Architecture, identity threat modeling, and MITRE ATT&CK / NIST AI RMF.
• Proficient in Azure AD Connect, B2B/B2C, IdentityNow for non-human identities, Defender for Identity, Intune, and PowerShell scripting in hybrid environments.
• Familiar with Agile and DevSecOps, plus legacy-to-SaaS migrations; strong communication and stakeholder skills.
• IT/Engineering degree or equivalent; CISSP or similar certification preferred.

Responsibilities

• IAM solution architecture: design artifacts for enterprise epics and ensure cross-system integration.
• Zero Trust and security strategy: enforce least-privilege access and ZTNA / GSA.
• Identity security and threat modeling: assess identity risks across data, APIs, and models.
• Access control and lifecycle management: design SSO, MFA, CA, passwordless, Joiner-Mover-Leaver workflows.
• PAM and IGA oversight: lead PAM and IGA design and deployment.
• Governance and enterprise alignment: maintain domain documentation and support leadership strategy.

Skills

IAM

Zero Trust

Threat modeling

Agile

DevSecOps

Stakeholder management

Communication

Security architecture

Education

Tertiary IT/Engineering degree

CISSP certification preferred

Tools

Azure AD Connect

B2B/B2C

IdentityNow

Defender for Identity

Intune

PowerShell scripting

Job description

Job Title: Security Architect - IAM
Location: Melbourne CBD (50% in-office)

Role Overview

An opportunity to join a major telecommunications organization to lead identity architecture, governance, and Zero Trust strategy across enterprise platforms. In this role, you will define reusable security patterns, design end-to-end IAM solution architectures, and embed security-by-design principles across cloud and hybrid environments. You will play a pivotal role in securing non-human identities, mitigating novel identity-based threats, and driving the safe adoption of core identity controls across complex enterprise initiatives.

Key Criteria

• Experience: 8+ years of IT solution design, build, or delivery experience, with 5+ years specializing in IT security, IAM, IGA, PAM, and cloud security.
• Core Technologies: Expertise with Microsoft Entra ID (Conditional Access, ZTNA, Global Secure Access, Graph API), Okta (SSO, SAML, OIDC, OAuth), CyberArk or BeyondTrust, and SailPoint, Saviynt, or One Identity.
• Architecture & Security Frameworks: Practical experience in Zero Trust Architecture, identity threat modeling, and applying frameworks such as MITRE ATT&CK and NIST AI RMF.
• Technical Skills: Hands-on knowledge of Azure AD Connect, B2B/B2C, IdentityNow (non-human/AI identities), Defender for Identity, Intune, and PowerShell scripting within hybrid cloud-native environments (Azure, AWS, GCP, VMware).
• Methodologies: Familiarity with Agile and DevSecOps practices, alongside experience handling legacy-to-SaaS system migrations.
• Soft Skills: Outstanding communication, negotiation, and stakeholder management skills to influence technical and business leaders effectively.
• Education & Certifications: Tertiary qualification in IT/Engineering or equivalent experience; industry certifications such as CISSP are preferred.

Key Relationships

• Senior Business Stakeholders (General Managers, Product Owners)
• Senior IT Stakeholders (General Managers, Engineering Managers, Delivery Managers)
• Enterprise IT & Delivery Teams
• External Industry & Open-Source Communities

Key Responsibilities

• IAM Solution Architecture: Design and deliver robust solution architecture artifacts (including SAR, SOAP, and NFRs) for assigned Enterprise Portfolio Epics, ensuring integration across the enterprise landscape.
• Zero Trust & Security Strategy: Enforce Zero Trust, least privilege access models, and ZTNA Global Secure Access (GSA) solutions.
• Identity Security & Threat Modeling: Conduct identity-specific threat modeling to mitigate novel identity-based risks across data, APIs, and models.
• Access Control & Lifecycle Management: Architect strategies for SSO, MFA, Conditional Access, Passwordless Authentication, and automated Joiner-Mover-Leaver lifecycle management.
• PAM & IGA Oversight: Lead the design and implementation of Privileged Access Management (PAM) and Identity Governance and Administration (IGA) platforms.
• Governance & Enterprise Alignment: Maintain domain documentation, update Enterprise Architecture tools (LeanIX), and present strategic recommendations to senior leadership.

At Randstad Digital, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.