IDAM Engineer

Ampol; Sydney; Hybrid; AUD 110,000 - 170,000; Full time

Benefits offered by this job

Employee Share Scheme

Novated Lease

Fuel discount

Volunteer day

Hybrid work

Career development

LinkedIn Learning

BabyCare Package

Job summary

Ampol is seeking an IDAM Engineer to design, develop, and enhance Identity & Access Management capabilities, with a focus on the Saviynt platform. This hands-on role builds scalable identity solutions, enabling secure access across the organisation and driving continuous improvement.

You will engineer business rules, integrations, REST APIs, and automations while collaborating with Security, Tech, and business teams. Hybrid work model offered in Australia.

Qualifications

• Hands-on with Microsoft Entra ID and Azure identity services (PIM, MFA, Apps).
• Experience administering Active Directory including OU structures and Entra Sync.
• Saviynt expertise: lifecycle management (JML), attribute mapping, integrations, REST APIs, and reporting.
• Able to engineer IAM solutions, workflows, and integrations with strong troubleshooting.

Responsibilities

• Design, implement, and support IAM across the enterprise.
• Manage identity lifecycle: onboarding, role changes, offboarding.
• Administer Azure Entra access management (PIM, MFA, App Registrations).
• Maintain Active Directory and Entra Sync configurations.
• Configure Saviynt: JML, application onboarding, access governance.
• Develop IAM integrations and REST API connections.
• Investigate IAM issues and drive root-cause resolution.
• Collaborate with Security and Business teams to deliver secure IAM solutions.

Skills

Microsoft Entra ID

Azure identity

PIM administration

MFA deployment

Azure App Registrations

Active Directory

Saviynt lifecycle

JML workflows

REST APIs

IAM troubleshooting

Governance & compliance

Stakeholder engagement

Tools

SQL reporting

Java reporting

Job description

At Ampol, we believe in the Power of Us - the extraordinary power of people to connect, act, and make a difference.

As a leading energy company operating across Australia, New Zealand, Singapore and from the United States, our work spans fuel supply, energy solutions, convenience retail, infrastructure, trading and shipping. Every role at Ampol plays a part in something bigger - powering progress for our customers, communities, and people.

Your career here is yours to shape. We back our people with real opportunities, the tools to grow, and a culture that rewards ownership and initiative. Whether you’re deepening your expertise or taking on something new, we’ll support you to power a career that works for you.

We’re building a workplace where everyone feels welcome, respected, and valued - because when people are free to be themselves, powerful things happen

Tech, Digital & Data @ Ampol

Technology, Digital and Data at Ampol are dedicated to empowering our business through technology-enabled differentiation, strengthening our foundations to build sustainable value for the future. Our team thrives on the challenge of innovation—dreaming upbig ideas, questioning the norm, and tackling complex problems. Together, we are shaping afuturethat not only meets the needs of today butanticipatesthe demands of tomorrow.

Our approach isanchoredin data-driven decision-makingand advanced technology integration, allowing us to create seamless and personalized customer experiences that truly resonate. By prioritizing value-based decisions and outcomes, we ensure that TDDdrives meaningful impact and measurable outcomes for the Ampol Group, leaving a lasting impact on our business and our customers.

About the role:

As an IDAM Engineer, you’ll play a key role in designing, developing, and enhancing Ampol’s Identity and Access Management capabilities, with a strong focus on our Saviynt platform. This is a hands‑on engineering role, responsible for building and improving identity solutions that enable secure, compliant, and efficient access across the organisation. You'll be responsible for solving complex identity challenges at their source, developing scalable and sustainable solutions rather than applying short‑term fixes.

This role is best suited to someone who enjoys the technical side of identity, including engineering business rules, configuring integrations, developing workflows, and working with APIs and automation. You'll bring a continuous improvement mindset, helping to mature Ampol's IDAM capability while introducing best practices, new ideas, and expertise gained from other enterprise environments.

Key Responsibilities

• Design, implement, and support Identity & Access Management (IAM) solutions across the enterprise.
• Manage identity lifecycle processes including onboarding, role changes, and offboarding.
• Administer Azure access management, including Entra PIM, MFA, and Application Registrations.
• Maintain and optimise Active Directory, including OU structures, attributes, and Entra Sync.
• Configure and enhance Saviynt solutions, including JML processes, application onboarding, and access governance.
• Develop and maintain business rules, integrations, REST API connections, and IAM automation.
• Investigate and resolve IAM-related issues, focusing on root‑cause resolution and continuous improvement.
• Collaborate with Security, Technology, and business teams to deliver secure, compliant, and scalable identity solutions.

Qualifications & Experience

• Strong hands‑on experience with Microsoft Entra ID and Azure identity services, including PIM administration, MFA deployment and migration, and Azure Application Registrations.
• Experience administering Active Directory, including OU structures, attributes, and Entra Sync.
• Strong Saviynt experience including Lifecycle Management (JML), attribute mapping, connection configuration, application onboarding, business rule development, integration design, REST APIs, and SQL/Java reporting.
• Proven ability to engineer and configure IAM solutions, workflows, rules, and integrations.
• Strong troubleshooting skills with a focus on identifying and resolving underlying causes rather than implementing temporary workarounds.
• Broad exposure to identity, security, governance, risk, and compliance practices.
• Experience working across complex enterprise environments and bringing IAM best practices from multiple organisations.
• Strong stakeholder engagement, communication, and technical documentation skills.

We’ll take you further by:

• Our total remuneration is competitive. This is across base salary, a performance incentive, employee share offers and a 25% discount on Fuel for two privately used cars!
• We are flexible. Many of our teams have embraced hybrid work, balancing time spent remote working, with time spent at an office to connect and work together where it adds value.
• We value recognition. We have an internal recognition platform amplifying the achievements of those who do great work and demonstrate our capabilities and values.
• Career development and learning opportunities including LinkedIn Learning and other tailored training solutions.
• BabyCare Package - financial and flexible support for parents transitioning back to work.
• Need some wheels? Novated Lease options are available.
• Invest in your future with the Employee Share Scheme
• Access to Ampol's Benefits & Recognition platform providing you access to retail discounts and cashbacks at over 500+ retailers in Australia that assist with everyday living expenses
• Care for your Community. Spend one paid day a year volunteering with one of our Ampol Foundation partners.

Additional Information

We’re an equal opportunity workplace. We not only embrace diversity and inclusion; we celebrate what makes you unique. We welcome applications from people of all ages, cultural backgrounds, and diverse sexualities and genders (including if you identify as transgender). We also highly encourage Aboriginal and Torres Strait Islander peoples to apply for roles with Ampol.