Identity Architect / Engineer

Sol Stak Pty; Australian Capital Territory; Hybrid; AUD 120,000 - 160,000; Full time

Job summary

SolStak seeks an Identity Architect/Engineer to design and deliver enterprise identity, authentication and access management for zero-trust sovereign environments. You will architect identity foundations that protect mission-critical Defence and government systems.

You’ll join a tight-knit engineering team with hybrid work across Victoria, New South Wales and the Australian Capital Territory, delivering secure identity solutions from design through accreditation to operations.

Qualifications

• Minimum two years of proven experience in a relevant role.
• Deep experience with Microsoft Entra ID, Active Directory or comparable IAM platforms.
• Strong understanding of SAML, OIDC, OAuth, PKI and zero-trust principles.
• Clear communication and a consultative, delivery-focused approach.
• Own GitLab instance and home lab environment (highly desirable).
• Existing Australian Government security clearance (highly desirable).
• Industry certifications (highly desirable).

Responsibilities

• Design identity architectures spanning on-premises, cloud and hybrid environments.
• Implement SSO, MFA, conditional access and privileged access management.
• Integrate identity with platforms, applications and security tooling across the stack.
• Define standards, patterns and governance for identity lifecycle and federation.
• Support accreditation, IRAP assessments and operational identity runbooks.

Skills

Microsoft Entra ID

Active Directory

IAM platforms

Zero-trust principles

Tools

GitLab

OpenShift

Kubernetes

LDAP

PKI tooling

Job description

SolStak is seeking an Identity Architect / Engineer to design and deliver enterprise identity,authentication and access management for zero-trust sovereign environments. You will architectidentity foundations that protect mission-critical Defence and government systems.

What you'll do

• Design identity architectures spanning on-premises, cloud and hybrid environments
• Implement SSO, MFA, conditional access and privileged access management
• Integrate identity with platforms, applications and security tooling across the stack
• Define standards, patterns and governance for identity lifecycle and federation
• Support accreditation, IRAP assessments and operational identity runbooks

What we’re looking for

• Deep experience with Microsoft Entra ID, Active Directory or comparable IAM platforms
• Strong understanding of SAML, OIDC, OAuth, PKI and zero-trust principles
• Clear communication and a consultative, delivery-focused approach
• Minimum two years of proven experience in a relevant role
• Own GitLab instance and home lab environment (highly desirable)
• Existing Australian Government security clearance (highly desirable)
• Industry certifications (highly desirable)

What it feels like to work here

You’ll join a tight-knit engineering team where identity decisions matter — every accessboundary you design protects real operational capability. Expect direct client engagement, seniorpeers who challenge your thinking, and the satisfaction of seeing your architecture hold up underaccreditation scrutiny. Hybrid work across VIC, NSW and ACT keeps you connected without thebureaucracy of a large integrator.

Why engineers join

• Work on sovereign identity programmes with national security impact
• Own architecture end-to-end — from design through to operational handover
• Collaborate across cloud, data, platform and cyber teams on complex programmes
• Grow into broader security architecture and zero-trust leadership roles
• Join a company that values craft, autonomy and getting things done properly

What technologies you're exposed to

SolStak engineers work across the full sovereign ICT stack. In this role you'll go deep onidentity while staying connected to the platforms and data services your designs protect.

• Cloudera CDP, Spark, Hive and enterprise data pipeline integrations
• Secure data access controls, classification and audit logging
• Microsoft Entra ID, AWS IAM, GCP IAM and sovereign cloud identity services
• Landing zones, hybrid connectivity and multi-cloud federation patterns
• VMware, OpenShift, Kubernetes RBAC and container identity
• Active Directory, LDAP, DNS and core directory services

Security products

• PAM, MFA, FIDO2, conditional access and SIEM/SOAR integrations
• PKI, certificate lifecycle, WAF and network access control platforms