IDAM Engineer

Ampol Limited; Sydney; Hybrid; AUD 120,000 - 180,000; Full time

Benefits offered by this job

25% fuel discount for two cars

Novated Lease options

Employee Share Scheme

Retail discounts & cashbacks

Volunteer day (one paid day)

Career development & LinkedIn Learning

Ampol Benefits platform access

Care for your Community

Job summary

Ampol is seeking an IDAM Engineer to design, develop, and enhance identity and access management capabilities across the organization, with a focus on Saviynt. This hands-on role builds scalable identity solutions for secure access and governance.

You will engineer business rules, configure integrations, and develop workflows with APIs and automation, while promoting best practices and continuous improvement in Ampol’s IDAM program.

Qualifications

• Experience with Microsoft Entra ID and Azure identity services.
• Saviynt lifecycle management and integration experience.
• Strong troubleshooting and cross-functional collaboration.

Responsibilities

• Design, implement, and support IAM solutions across the enterprise.
• Manage identity lifecycle: onboarding, role changes, offboarding.
• Administer Azure Entra, MFA, Entra PIM, and app registrations.
• Maintain Active Directory and Entra Sync.
• Configure Saviynt: JML, onboarding, access governance.
• Develop IAM automation, REST APIs, integrations.
• Troubleshoot IAM issues with root-cause focus.
• Collaborate with Security, Tech, and business teams.

Skills

Entra ID / Azure

MFA & Entra PIM

Saviynt

Active Directory

IAM Solutions

REST APIs

SQL/Java reporting

Troubleshooting

Stakeholder comms

Job description

At Ampol, we believe in the Power of Us - the extraordinary power of people to connect, act, and make a difference.

As a leading energy company operating across Australia, New Zealand, Singapore and from the United States, our work spans fuel supply, energy solutions, convenience retail, infrastructure, trading and shipping. Every role at Ampol plays a part in something bigger - powering progress for our customers, communities, and people.

Your career here is yours to shape. We back our people with real opportunities, the tools to grow, and a culture that rewards ownership and initiative. Whether you’re deepening your expertise or taking on something new, we’ll support you to power a career that works for you.

We’re building a workplace where everyone feels welcome, respected, and valued - because when people are free to be themselves, powerful things happen

Tech, Digital & Data @ Ampol

Technology, Digital and Data at Ampol are dedicated to empowering our business through technology-enabled differentiation, strengthening our foundations to build sustainable value for the future. Our team thrives on the challenge of innovation—dreaming upbig ideas, questioning the norm, and tackling complex problems. Together, we are shaping a future that not only meets the needs of today but anticipates the demands of tomorrow.

Our approach is anchored in data-driven decision-making and advanced technology integration, allowing us to create seamless and personalized customer experiences that truly resonate. By prioritizing value-based decisions and outcomes, we ensure that TDD drives meaningful impact and measurable outcomes for the Ampol Group, leaving a lasting impact on our business and our customers.

About the role:

As an IDAM Engineer, you’ll play a key role in designing, developing, and enhancing Ampol’s Identity and Access Management capabilities, with a strong focus on our Saviynt platform. This is a hands‑on engineering role, responsible for building and improving identity solutions that enable secure, compliant, and efficient access across the organisation. You'll be responsible for solving complex identity challenges at their source, developing scalable and sustainable solutions rather than applying short‑term fixes.

This role is best suited to someone who enjoys the technical side of identity, including engineering business rules, configuring integrations, developing workflows, and working with APIs and automation. You'll bring a continuous improvement mindset, helping to mature Ampol’s IDAM capability while introducing best practices, new ideas, and expertise gained from other enterprise environments.

Key Responsibilities

• Design, implement, and support Identity & Access Management (IAM) solutions across the enterprise.
• Manage identity lifecycle processes including onboarding, role changes, and offboarding.
• Administer Azure access management, including Entra PIM, MFA, and Application Registrations.
• Maintain and optimise Active Directory, including OU structures, attributes, and Entra Sync.
• Configure and enhance Saviynt solutions, including JML processes, application onboarding, and access governance.
• Develop and maintain business rules, integrations, REST API connections, and IAM automation.
• Investigate and resolve IAM-related issues, focusing on root‑cause resolution and continuous improvement.
• Collaborate with Security, Technology, and business teams to deliver secure, compliant, and scalable identity solutions.

Qualifications & Experience

• Strong hands‑on experience with Microsoft Entra ID and Azure identity services, including PIM administration, MFA deployment and migration, and Azure Application Registrations.
• Experience administering Active Directory, including OU structures, attributes, and Entra Sync.
• Strong Saviynt experience including Lifecycle Management (JML), attribute mapping, connection configuration, application onboarding, business rule development, integration design, REST APIs, and SQL/Java reporting.
• Proven ability to engineer and configure IAM solutions, workflows, rules, and integrations.
• Strong troubleshooting skills with a focus on identifying and resolving underlying causes rather than implementing temporary workarounds.
• Broad exposure to identity, security, governance, risk, and compliance practices.
• Experience working across complex enterprise environments and bringing IAM best practices from multiple organisations.
• Strong stakeholder engagement, communication, and technical documentation skills.

We’ll take you further by:

• Our total remuneration is competitive. This is across base salary, a performance incentive, employee share offers and a 25% discount on Fuel for two privately used cars!
• We are flexible. Many of our teams have embraced hybrid work, balancing time spent remote working, with time spent at an office to connect and work together where it adds value.
• We value recognition. We have an internal recognition platform amplifying the achievements of those who do great work and demonstrate our capabilities and values.
• Career development and learning opportunities including LinkedIn Learning and other tailored training solutions.
• BabyCare Package - financial and flexible support for parents transitioning back to work.
• Need some wheels? Novated Lease options are available.
• Invest in your future with the Employee Share Scheme
• Access to Ampol's Benefits & Recognition platform providing you access to retail discounts and cashbacks at over 500+ retailers in Australia that assist with everyday living expenses
• Care for your Community. Spend one paid day a year volunteering with one of our Ampol Foundation partners.