Identity & Access Management Engineer

City-of-Greater-Geelong; Geelong; On-site; AUD 138,000 - 168,000; Full time

Job summary

City of Greater Geelong seeks an IAM expert to lead lifecycle management, PAM and governance, embedding least-privilege access across the organisation. You will partner with product and platform teams to automate controls and strengthen security while enabling seamless user access.

The role requires a tertiary qualification or equivalent IAM experience, plus strong stakeholder engagement. Fixed-term, 12 months, commencing at $153,057 plus super.

Qualifications

• Tertiary qualification in Cyber Security, Computer Science, or related field, or extensive IAM engineering experience.
• Experience designing and implementing enterprise IAM including identity lifecycle, access governance and PAM.
• Strong knowledge of cyber security operations and defensive security practices.
• Experience developing automation and response workflows to improve incident resolution.
• Knowledge of IAM standards/frameworks (NIST SP 800-63, Essential Eight).
• Excellent stakeholder engagement and communication skills.

Responsibilities

• Lead the development of the IAM business case and support procurement through vendor selection.
• Establish policies, standards and role-based access frameworks underpinning secure access management.
• Deliver seamless access experiences via customer identity and access management (registration, authentication, self-service).
• Design end-to-end identity lifecycle processes with automation for provisioning and deprovisioning.
• Drive access governance including requests, approvals, certifications and remediation.
• Own and evolve Privileged Access Management capabilities and align with standards.
• Expand governance to non-human identities (service accounts, automated workloads).
• Collaborate with system integrators to ensure solutions meet requirements.
• Provide guidance on authentication, federation and secure access design.

Skills

IAM engineering

Identity lifecycle

PAM

IGA

Least privilege

Security automation

Education

Bachelor's degree in Cyber Security or Computer Science

Job description

Job no: 500888
Work type: Fixed Term Full Time
Classification: SPL
Categories: Digital Information & Technology

About the role

In this role, you'll become the City's subject matter expert for Identity and Access Management as the capability transitions into operations. You'll take ownership of Identity Lifecycle Management, Privileged Access Management (PAM), and Identity Governance and Administration (IGA), driving their ongoing evolution and maturity. Working closely with product and platform teams, you'll lead the automation and optimisation of access controls, embedding least‑privilege principles and strengthening governance to reduce identity‑related risk while enabling secure and seamless access across the organisation.

Work type: Fixed-term, full-time (12 months)
Classification: SPL, Commencing at $ 153,057 plus super.

Key responsibilities include:

• Leading the development of the business case for the City's IAM capability and supporting procurement activities through to successful vendor selection.
• Establishing the policies, standards and role‑based access framework that underpin secure access management, ensuring least‑privilege and need‑to‑know principles are embedded across the organisation.
• Delivering secure and seamless access experiences for community‑facing services through customer identity and access management solutions, including registration, authentication and self‑service account management.
• Designing and implementing end‑to‑end identity lifecycle processes, leveraging automation to streamline user provisioning, access changes and deprovisioning.
• Driving access governance practices, including access requests, approvals, certifications, reviews and remediation activities, to ensure access remains appropriate and compliant.
• Owning and evolving the City's Privileged Access Management (PAM) capability, strengthening controls and aligning practices with recognised security standards.
• Expanding identity governance to cover non‑human identities, including service accounts, automated workloads and emerging AI‑enabled solutions.
• Collaborating with system integrators and delivery partners throughout design, build and testing phases to ensure solutions meet business and security requirements.
• Acting as the City's trusted IAM subject matter expert, providing guidance and mentoring to product, platform and operational teams on authentication, federation and secure access design.

About you

To be successful in this role, you will have a tertiary qualification in Cyber Security, Computer Science, or related field, or extensive experience in a senior Identity and Access Management engineering role.

• Demonstrated experience designing and implementing enterprise identity and access management capability, including identity lifecycle, access governance and privileged access.
• Relevant experience in a senior identity engineering role.
• Proven experience implementing and enhancing enterprise Identity and Access Management (IAM) solutions that strengthen security and enable seamless access across complex environments.
• Strong understanding of cyber security operations and defensive security practices, including threat monitoring, incident response, threat detection and vulnerability management.
• Experience developing and optimising security detections, automation, and response workflows to improve operational efficiency and accelerate incident resolution.
• Solid knowledge of network security principles and controls, including network segmentation, intrusion detection and prevention, and secure configuration practices.
• Advanced analytical and problem‑solving skills, with the ability to investigate complex security challenges, interpret data from multiple sources, and provide clear, risk‑based recommendations.
• Demonstrated experience conducting vulnerability assessments, managing remediation programs, and leveraging threat intelligence to strengthen organisational resilience.
• Sound knowledge of identity and access management standards and frameworks, including NIST SP 800‑63 Digital Identity Guidelines, VPDSS, and the Essential Eight.
• Exceptional stakeholder engagement and communication skills, with the ability to translate technical concepts, risks and solutions into clear, actionable insights for both technical and non‑technical audiences.
• Preferred candidates will be required to undergo a National Police Check and a Working with Children's Check as part of the recruitment process (funded by the City).

Child Safety Responsibilities

We are committed to being a child‑safe organisation and have zero‑tolerance for child abuse. We have specific policies, procedures, and mandatory training in place to support employees, volunteers, and contractors to achieve and adhere to these commitments. Please read our Child Safe Standards Management Policy .

Diversity and Inclusion

At the City we want a workforce that reflects the community we live in. We welcome and embrace everyone, all people with their own unique experiences, and support and encourage all our employees to do their best work, have equal access to opportunities and a just working environment. For this reason, we particularly welcome and encourage applications from First Nations people, people with diverse cultural and linguistic backgrounds, from the LGBTQIA+ community, people with disability and people of all genders, ages and diverse experience.

We are the City

From parks to offices, childcare centres to works depots, leisure facilities to the Wool Museum and waterfront, our team plays a vital role in shaping our vibrant and growing community. Our community counts on us to get the essentials right while looking for ways to go beyond. By listening, collaborating, and focusing on sustainability, we strive to do the basics brilliantly and create a lasting impact. If you're ready to be part of something bigger, join us in shaping the future of Geelong.

We support accessibility and encourage discussions about any adjustments or support you may need during the recruitment process.

We collect demographic data to help us learn who our advertisements are reaching and how we can reach an even more diverse audience. We are committed to building a more diverse team. Your responses to our demographic questions are strictly confidential and will not be individually shared.

Advertised: 27 Oct 2026 9:00 AM AUS Eastern Daylight Time
Applications close: 17 Nov 2026 11:55 PM AUS Eastern Daylight Time

View the status of your application.

We Acknowledge the Wadawurrung People as the Traditional Owners of the Land, Waterways and Skies. We pay our respects to their Elders, past and present. We Acknowledge all Aboriginal and Torres Strait Islander people who are part of our Greater Geelong community today.