ICAM Engineer — Secure Identity & Access (Zero Trust)

Profectus; Canberra; On-site; AUD 110,000 - 170,000; Full time

Job summary

Profectus is seeking ICAM Engineers to design, implement and support identity and access capabilities across secure Australian Government environments. You will work on Entra ID configuration, PAM governance, PKI management and policy enforcement.

The role emphasizes provisioning, access reviews, joiner/mover/leaver processes and federation using SAML, OAuth, and OpenID Connect. Strong documentation skills and security framework alignment are required.

Qualifications

• Experience designing and implementing identity and access management solutions in large or secure ICT environments.
• Strong hands-on experience with Microsoft Entra ID including conditional access, SSO and MFA.
• Experience with privileged access management tools and practices.
• Experience with PKI, certificate management and key management.
• Experience delivering identity governance including provisioning, access reviews and RBAC.
• Understanding of Zero Trust principles and modern access control patterns.

Responsibilities

• Design, implement and support ICAM capability across secure environments
• Configure and manage Microsoft Entra ID, including conditional access, single sign-on, multi-factor authentication and identity protection
• Implement and support privileged access management (PAM), including privileged account governance and just-in-time access
• Design and manage PKI, including certificate lifecycle and key management
• Deliver identity governance and administration, including provisioning, access reviews and joiner, mover and leaver processes
• Implement role-based and attribute-based access control aligned to least privilege
• Apply Zero Trust principles, including continuous verification and policy enforcement across users, devices and services
• Configure federation and directory services using standards such as SAML, OAuth 2.0, OpenID Connect and SCIM
• Integrate identity and access controls with applications, platforms and cloud services
• Align identity and access solutions to security frameworks such as the ISM, Essential Eight and PSPF
• Produce and maintain technical documentation, standards and operational procedures

Skills

Microsoft Entra ID

Zero Trust

Identity governance

PAM

Federation & standards

Education

Microsoft SC-300 certification

CyberArk certification

SailPoint certification

Tools

Active Directory

LDAP

PKI

SAML/OAuth/OpenID

Job description

Profectus is seeking ICAM Engineers to design, implement and support identity and access capabilities across secure Australian Government environments. You will work on Entra ID configuration, PAM governance, PKI management and policy enforcement.

The role emphasizes provisioning, access reviews, joiner/mover/leaver processes and federation using SAML, OAuth, and OpenID Connect. Strong documentation skills and security framework alignment are required.