Identity & Access Management Engineer

Council Jobs; Geelong; On-site; AUD 138,000 - 168,000; Full time

Job summary

City of Geelong is seeking an IAM expert to lead the Identity and Access Management capability as it transitions into operations. You will own lifecycle management, PAM, and IGA, driving maturity while collaborating with product and platform teams to automate and strengthen access governance.

Role requires a cyber security or related degree or extensive IAM senior experience, with a focus on least-privilege, threat detection and secure access across complex environments.

Qualifications

• Tertiary qualification in Cyber Security, Computer Science, or related field, or extensive experience in a senior IAM engineering role.
• Experience designing and implementing enterprise IAM capability, including lifecycle, governance and privileged access.
• Experience implementing and enhancing IAM solutions that strengthen security and enable seamless access.

Responsibilities

• Lead the development of the business case for the City's IAM capability and support procurement through vendor selection.
• Establish policies, standards and RBAC to underpin secure access management with least-privilege and need-to-know.
• Deliver secure access experiences for community-facing services via identity management solutions, including registration, authentication and self-service accounts.
• Design and implement end-to-end identity lifecycle processes with automation for provisioning, changes and deprovisioning.
• Drive access governance practices including requests, approvals, certifications, reviews and remediation.
• Own and evolve the Privileged Access Management (PAM) capability with strong controls.
• Expand identity governance to non-human identities including service accounts and AI-enabled solutions.
• Collaborate with system integrators to ensure solutions meet business and security requirements.
• Act as trusted IAM subject matter expert, mentoring teams on authentication, federation and secure design.

Skills

Identity IAM engineering

Identity lifecycle management

Privileged Access Management

Identity Governance and Administration

Governance

Least-privilege

Threat monitoring

Incident response

Vulnerability management

Stakeholder engagement

Education

Cyber security or Computer Science degree

Related field experience

Tools

NIST SP 800-63

Essential Eight

Job description

Job no: 500888
Work type: Fixed Term Full Time
Classification: SPL
Categories: Digital Information & Technology

About the role

In this role, you'll become the City's subject matter expert for Identity and Access Management as the capability transitions into operations. You'll take ownership of Identity Lifecycle Management, Privileged Access Management (PAM), and Identity Governance and Administration (IGA), driving their ongoing evolution and maturity. Working closely with product and platform teams, you'll lead the automation and optimisation of access controls, embedding least-privilege principles and strengthening governance to reduce identity-related risk while enabling secure and seamless access across the organisation.

Work type: Fixed-term, full-time (12 months) Classification: SPL, Commencing at $ 153,057 plus super.

Key responsibilities include:

• Leading the development of the business case for the City's IAM capability and supporting procurement activities through to successful vendor selection.
• Establishing the policies, standards and role-based access framework that underpin secure access management, ensuring least-privilege and need-to-know principles are embedded across the organisation.
• Delivering secure and seamless access experiences for community-facing services through customer identity and access management solutions, including registration, authentication and self-service account management.
• Designing and implementing end-to-end identity lifecycle processes, leveraging automation to streamline user provisioning, access changes and deprovisioning.
• Driving access governance practices, including access requests, approvals, certifications, reviews and remediation activities, to ensure access remains appropriate and compliant.
• Owning and evolving the City's Privileged Access Management (PAM) capability, strengthening controls and aligning practices with recognised security standards.
• Expanding identity governance to cover non-human identities, including service accounts, automated workloads and emerging AI-enabled solutions.
• Collaborating with system integrators and delivery partners throughout design, build and testing phases to ensure solutions meet business and security requirements.
• Acting as the City's trusted IAM subject matter expert, providing guidance and mentoring to product, platform and operational teams on authentication, federation and secure access design.

About you

To be successful in this role, you will have a tertiary qualification in Cyber Security, Computer Science, or related field, or extensive experience in a senior Identity and Access Management engineering role.

• Demonstrated experience designing and implementing enterprise identity and access management capability, including identity lifecycle, access governance and privileged access.
• Relevant experience in a senior identity engineering role.
• Proven experience implementing and enhancing enterprise Identity and Access Management (IAM) solutions that strengthen security and enable seamless access across complex environments.
• Strong understanding of cyber security operations and defensive security practices, including threat monitoring, incident response, threat detection and vulnerability management.
• Experience developing and optimising security detections, automation, and response workflows to improve operational efficiency and accelerate incident resolution.
• Solid knowledge of network security principles and controls, including network segmentation, intrusion detection and prevention, and secure configuration practices.
• Advanced analytical and problem-solving skills, with the ability to investigate complex security challenges, interpret data from multiple sources, and provide clear, risk-based recommendations.
• Demonstrated experience conducting vulnerability assessments, managing remediation programs, and leveraging threat intelligence to strengthen organisational resilience.
• Sound knowledge of identity and access management standards and frameworks, including NIST SP 800-63 Digital Identity Guidelines, VPDSS, and the Essential Eight.
• Exceptional stakeholder engagement and communication skills, with the ability to translate technical concepts, risks and solutions into clear, actionable insights for both technical and non-technical audiences.
• Preferred candidates will be required to undergo a National Police Check and a Working with Children’s Check as part of the recruitment process (funded by the City).

Child Safety Responsibilities

We are committed to being a child-safe organisation and have zero-tolerance for child abuse. We have specific policies, procedures, and mandatory training in place to support employees, volunteers, and contractors to achieve and adhere to these commitments. Please read ourChild Safe Standards Management Policy.

Diversity and Inclusion

At the City we want a workforce that reflects the community we live in. We welcome and embrace everyone, all people with their own unique experiences, and support and encourage all our employees to do their best work, have equal access to opportunities and a just working environment. For this reason, we particularly welcome and encourage applications from First Nations people, people with diverse cultural and linguistic backgrounds, from the LGBTQIA+ community, people with disability and people of all genders, ages and diverse experience.

We are the City

From parks to offices, childcare centres to works depots, leisure facilities to the Wool Museum and waterfront, our team plays a vital role in shaping our vibrant and growing community. Our community counts on us to get the essentials right while looking for ways to go beyond. By listening, collaborating, and focusing on sustainability, we strive to do the basics brilliantly and create a lasting impact. If you’re ready to be part of something bigger, join us in shaping the future of Geelong.

We support accessibility and encourage discussions about any adjustments or support you may need during the recruitment process.

Applications and Enquiries

Enquiries: Nick Veljanoski | IT Security, Risk and Compliance Manager ***************@geelongcity.vic.gov.au

We collect demographic data to help us learn who our advertisements are reaching and how we can reach an even more diverse audience. We are committed to building a more diverse team. Your responses to our demographic questions are strictly confidential and will not be individually shared.

#LI-Hybrid

Advertised: 27 Oct 2026 9:00 AM AUS Eastern Daylight Time
Applications close: 17 Nov 2026 11:55 PM AUS Eastern Daylight Time

Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad .