Identity and Access Management Technology Lead

HESTA Super; City of Melbourne; On-site; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Leave for moments that matter

Professional development

Health & wellbeing program

Financial wellbeing

Job summary

HESTA Super is seeking a Technology Lead for Identity & Access Platforms to own the IAM stack, govern federation and secure privileged access. You’ll collaborate with security, applications and audit teams to keep authentication flows reliable while expanding to machine and AI identities, a rapidly evolving frontier in cyber security.

You will guide platform strategy, implement best practices for Okta/Entra ID, and drive security assurance activities in a regulated financial services environment.

Qualifications

• 5+ years' experience implementing and supporting Okta and/or Entra ID, including federation and conditional access
• 3+ years' experience with Identity Governance and Privileged Access Management platforms (CyberArk, SailPoint or Saviynt)
• Solid understanding of SAML 2.0, OIDC/OAuth 2.0 and WS-Federation, including token flows and common failure modes
• Experience supporting security assurance activities such as audits and control reviews
• Working knowledge of frameworks like APRA CPS 234 or ISO 27001, in regulated environments such as financial services or superannuation

Responsibilities

• Own the hybrid Okta/Entra ID federation and IAM tooling
• Drive proactive remediation of configuration issues, stale credentials and dormant accounts
• Lead root cause analysis for IAM incidents and troubleshoot federated authentication flows (SAML, OIDC, WS-Federation)
• Contribute to technology roadmaps addressing emerging identity challenges including AI-enabled identities

Skills

Okta / Entra ID

Identity Governance

Privileged Access Management

SAML 2.0 / OIDC / WS-Federation

Audits & compliance

APRA CPS 234 / ISO 27001

Tools

Okta

Entra ID

CyberArk

SailPoint

Saviynt

Job description

Identity and Access Management Technology Lead

Select how often (in days) to receive an alert:

More than one million Australians trust us with their money, and that trust shapes how we work every day. Our members sit at the centre of everything we do, guiding our decisions and the impact we strive to make.
We’re looking for people who are purpose-driven and accountable, who value inclusion and collaboration, and who are proactive in managing risk to protect our members’ long-term outcomes. In return, you’ll be part of an organisation where your work contributes to strong returns, real-world impact, and a culture that reflects the communities our members serve.

Careers with Impact

About the Role

As Technology Lead – Identity & Access Platforms, you'll take true technical ownership of the platforms that keep the organisation secure, at a moment when identity itself is being redefined. You'll act as the technical authority for IAM incidents and implementations, working closely with Information Security, application and audit teams to keep authentication, governance and privileged access running reliably, while helping extend that thinking to machine and AI agentic identities, one of the fastest-moving frontiers in cyber security today. It's a chance to solve real, high-impact problems rather than maintain the status quo, and to sharpen skills that sit at the leading edge of the profession.

• Own the hybrid Okta/Entra ID federation, along with Identity Governance and Privileged Access Management platforms
• Drive proactive identification and remediation of configuration issues, stale credentials and dormant accounts
• Lead root cause analysis for IAM incidents and troubleshoot federated authentication flows (SAML, OIDC, WS-Federation)
• Contribute to technology roadmaps that anticipate emerging identity challenges, including machine and agentic AI access

About You

You're a hands-on identity engineer who's just as comfortable troubleshooting a failed federation as you are shaping platform strategy for what's next. You bring:

• 5+ years' experience implementing and supporting Okta and/or Entra ID, including federation and conditional access
• 3+ years' experience with Identity Governance and Privileged Access Management platforms (such as CyberArk, SailPoint or Saviynt)
• Solid understanding of SAML 2.0, OIDC/OAuth 2.0 and WS-Federation, including token flows and common failure modes
• Experience supporting security assurance activities such as audits and control reviews
• Working knowledge of frameworks like APRA CPS 234 or ISO 27001 is highly regarded, as is experience in a regulated industry such as financial services or superannuation

More than one million Australians trust us with their money, and that trust shapes how we work every day. Our members sit at the centre of everything we do, guiding our decisions and the impact we strive to make.

We’re looking for people who are purpose-driven and accountable, who value inclusion and collaboration, and who proactive in managing risk to protect our members’ long-term outcomes. In return, you’ll be part of an organisation where your work contributes to strong returns, real-world impact, and a culture that reflects the communities our members serve.

Bring your authentic and passionate self to this exceptional role #careerswithimpact

Benefits that matter and make a difference for our employees

• Leave for those moments that matter, an additional 6 days of leave at the end of year, up to 6 days paid volunteer leave, gender neutral paid parental leave of 20 weeks, Gender Affimation leave, reproductive health and wellbeing leave, Cultural and Ceremonial leave. Access your LSL after 3 years, take AL at half pay, and purchase up to 2 weeks additional leave (just to name a few!).
• Your Professional development matters, up to $5k per year professional development and up to 8 days professional development leave, HESTA scholarships and free access to a range of premium learning tools.
• Your health and wellbeing matters, free annual flu shots and skin checks, incredible social events throughout the year and a comprehensive employee assistance program available 24/7.
• Your financial wellbeing matters, up to 15% super, financial planning support, end of year payment for all Enterprise Agreement-covered employees, incentivised Employee Referral Program and novated lease options.

We celebrate, value and include people of all backgrounds, genders, identities, cultures and abilities. We welcome and support applications from First Nations people, physically, neuro or culturally diverse, LGBTQI+, and people of any age. We are proud to be WGEA accredited as an Employer of Choice for Gender Equity.

We want all candidates to feel safe, included and provided with the best opportunity to thrive, if you require reasonable adjustments during your application or throughout the recruitment process, please reach out to a member of the Talent team [e-mail] and we’ll call you to discuss.

HESTA Superannuation Fund Number (SFN): 129638949. HESTA Australian Business Number (ABN): 64 971 749 321