Identity Engineer - PAM

endeavour group careers; Sydney; On-site; AUD 140,000 - 180,000; Full time

Benefits offered by this job

Hybrid working model

Discounts on Endeavour Group brands (e

Learning and development opportunities

Health & wellbeing programs

Staff discounts with partners

Job summary

Endeavour Group is seeking a PAM Identity Engineer to design, implement and uplift privileged access management across cloud and on‑prem environments, working with Identity Architect, Identity Manager, and broader teams to strengthen PAM adoption and security maturity.

The role offers hybrid work in Sydney or Melbourne, exposure to CyberArk, SailPoint, and Entra ID, and opportunities to drive governance, onboarding, and automation while supporting audit activities and enterprise security.

Qualifications

• 3+ years hands-on engineering experience managing enterprise PAM
• In-depth IAM concepts including least privilege
• Bachelor degree in Computer Science or Information Technology
• Experience spanning daily operational support and engineering delivery
• Excellent communication with cross-functional teams and business partners
• Familiarity with PAM/IGA tools (SailPoint, Entra ID, Saviynt) or security certs (CISSP)

Responsibilities

• Privileged Account Onboarding across servers, databases, cloud platforms, and enterprise systems
• Platform Operations Support for BAU engineering, incident troubleshooting, service requests, and change management
• Security Control Uplift by implementing PAM policies and automated password rotation
• Architectural Roadmap Delivery with Identity Architects for scalable onboarding patterns
• Governance & Compliance support including audit activities and documentation

Skills

Privileged access experience

Core IAM knowledge

Bachelor’s degree in CS/IT

Balanced technical mindset

Collaborative communication

IGA tools familiarity

Education

Bachelor's degree in Computer Science or Information Technology

Tools

SailPoint

Entra ID

Saviynt

CISSP

Job description

Let’s create a more sociable future together

At Endeavour, we’re totally into what we do. With a portfolio that includes Dan Murphy’s, BWS, ALH Hotels, Pinnacle Drinks and more, we love to bring people together. Together we share our passion for our products and industry; it’s what inspires us to dream big, and continue to create new experiences for our customers and teams across Australia. If you thrive on positive energy, we want to meet you!

Job Description

Identity Engineer - PAM

Endeavour Group is Australia’s largest retail drinks network under the Dan Murphy’s and BWS brands, operating the country's largest portfolio of licenced hotels. We are seeking a skilled PAM Identity Engineer to drive the design, implementation, and continuous improvement of our Privileged Access Management function. In this hands‑on role, you will work closely with our Identity Architect, Identity Manager, and broader stakeholder teams to strengthen PAM adoption and uplift overall security maturity. You will play a crucial role in safeguarding enterprise systems, data, and resources while enabling seamless user experiences across diverse environments.

• Love what you do and leave your mark
• Flexible Working Model: Hybrid Ways of Working - Sydney or Melbourne Location.
• High Impact Capability: Drive enterprise‑wide Privileged Access Management maturity across complex cloud and on‑premises environments.
• Modern Tech Stack: Gain hands‑on exposure to market‑leading IAM and PAM platforms, including CyberArk, SailPoint, and Entra ID.

Sounds good? Read on.

Here is a taster of what you can expect in this role:

• Privileged Account Onboarding: Expand PAM coverage across servers, databases, cloud platforms, and enterprise systems by discovering and onboarding privileged accounts.
• Platform Operations Support: Maintain daily platform stability and compliance through BAU engineering, incident troubleshooting, service requests, and change management.
• Security Control Uplift: Review, implement, and enhance PAM policies in line with enterprise security requirements, driving automated password rotation and account discovery.
• Architectural Roadmap Delivery: Partner with Identity Architects to design scalable onboarding patterns, plan platform evolution, and deliver strategic PAM enhancements.
• Governance & Compliance: Support audit activities, maintain detailed operational documentation, and ensure continuous service improvements across the IAM ecosystem.

Qualifications

Now let’s talk about you:

• Privileged Access Experience: Bring 3+ years of hands‑on engineering experience managing enterprise PAM solutions, with strong expertise in CyberArk.
• Core IAM Knowledge: Demonstrate an in‑depth understanding of Identity and Access Management concepts, principles, and best practices, including least privilege.
• Tertiary Technical Qualifications: Hold a Bachelor's degree in Computer Science, Information Technology, or a closely related discipline.
• Balanced Technical Mindset: Exhibit proven experience spanning daily operational support (incident resolution, debugging) and engineering delivery.
• Collaborative Communication Skills: Possess excellent communication and relationship‑building abilities to work effectively with cross‑functional technical teams and business partners.
• Desirable Platform Exposure: Bring valuable familiarity with Identity Governance and Administration (IGA) tools such as SailPoint, Entra ID, or Saviynt, or hold relevant security certifications (e.g., CISSP).

The benefits are good too!

• We offer hybrid ways of working
• An exclusive discount card for our ALH Hotels pubs & accommodation, BWS, Dan Murphy’s and other Endeavour Group brands. Through our partnership with Woolworths, you’ll also enjoy discounts at Woolies supermarkets and BIG W
• As a valued member of the team, your health and wellbeing is our top priority. You will have access to a range of free services to help you live well and support your physical, mental and financial wellbeing
• Endeavour Group is full of opportunities - use our dedicated learning and development options to grow an idea, yourself, and your career. This is just the start, so dream big
• Find out more about our range of benefits and discounts here

At Endeavour, we value being a workplace where everyone’s welcome - if you meet a number of the requirements (and not all), we encourage you to apply.

Additional Information

We are together creators

With a portfolio that includes Dan Murphy’s, BWS, ALH Hotels, Pinnacle Drinks and more, Endeavour Group is big on sociability. Together we create the moments that bring millions of people together. And together we have more fun, create more opportunities, and score a lot more goals. We’re serious about creating a safe, inclusive and fun place to rock up to where equal opportunity is key, and flexibility is part of how we roll.

We’re all about creating a more sociable future - for our customers and each other. If this job excites you - and you’re close‑enough on the requirements, reach out, we’d love to hear from you.

#WeAreTogetherCreators #ComeAsYouAre #DreamBig #FeelTheEnergy #LeaveYourMark #EndeavourGroup