Identity Engineer - PAM

Endeavour Group; Sydney; Hybrid; AUD 120,000 - 170,000; Full time

Benefits offered by this job

Hybrid working model

Staff discounts across Endeavour Group

Health & wellbeing programs

Learning and development opportunities

Discounts with Woolworths affiliates (

Job summary

Endeavour Group is seeking an experienced PAM Identity Engineer to design, implement and uplift Privileged Access Management across our enterprise, combining cloud and on‑prem environments. You will work with CyberArk, SailPoint and Entra ID, driving security maturity and seamless user experiences while partnering with Identity Architects and broader teams.

This role offers hybrid work arrangements in Sydney/Melbourne and a chance to leave a measurable security footprint across Australia’s

Qualifications

• 3+ years hands-on PAM engineering experience with enterprise solutions.
• Deep IAM concepts knowledge including least privilege.
• Bachelor’s degree in computer science, information technology or related field.
• Experience spanning daily operational support and engineering delivery.
• Excellent communication and stakeholder collaboration skills.
• Familiarity with IGA tools or security certifications is a plus.

Responsibilities

• Onboard and expand PAM coverage across servers, databases, cloud and on‑premise systems.
• Maintain platform stability, BAU engineering, incident triage and change management.
• Review and uplift PAM policies, drive automated password rotation and discovery.
• Partner with Identity Architects to design scalable onboarding patterns and roadmaps.
• Support governance, audit activities and continuous service improvements.

Skills

Privileged Access Experience

IAM Knowledge

Operational Support

Collaborative Communication

Security Certifications (optional)

Education

Bachelor's degree in CS/IT

Tools

CyberArk

SailPoint

Entra ID

Saviynt

Job description

About Us

Let’s create a more sociable future together

At Endeavour, we’re totally into what we do. With a portfolio that includes Dan Murphy’s, BWS, ALH Hotels, Pinnacle Drinks and more, we love to bring people together. Together we share our passion for our products and industry; it’s what inspires us to dream big, and continue to create new experiences for our customers and teams across Australia. If you thrive on positive energy, we want to meet you!

About the Role

Identity Engineer - PAM

Endeavour Group is Australia’s largest retail drinks network under the Dan Murphy’s and BWS brands, operating the country's largest portfolio of licenced hotels. We are seeking a skilled PAM Identity Engineer to drive the design, implementation, and continuous improvement of our Privileged Access Management function. In this hands‑on role, you will work closely with our Identity Architect, Identity Manager, and broader stakeholder teams to strengthen PAM adoption and uplift overall security maturity. You will play a crucial role in safeguarding enterprise systems, data, and resources while enabling seamless user experiences across diverse environments.

• Love what you do and leave your mark
• Flexible Working Model: Hybrid Ways of Working - Sydney or Melbourne Location.
• High Impact Capability: Drive enterprise‑wide Privileged Access Management maturity across complex cloud and on‑premises environments.
• Modern Tech Stack: Gain hands‑on exposure to market‑leading IAM and PAM platforms, including CyberArk, SailPoint, and Entra ID.

Sounds good? Read on.

Here is a taster of what you can expect in this role:

• Privileged Account Onboarding: Expand PAM coverage across servers, databases, cloud platforms, and enterprise systems by discovering and onboarding privileged accounts.
• Platform Operations Support: Maintain daily platform stability and compliance through BAU engineering, incident troubleshooting, service requests, and change management.
• Security Control Uplift: Review, implement, and enhance PAM policies in line with enterprise security requirements, driving automated password rotation and account discovery.
• Architectural Roadmap Delivery: Partner with Identity Architects to design scalable onboarding patterns, plan platform evolution, and deliver strategic PAM enhancements.
• Governance & Compliance: Support audit activities, maintain detailed operational documentation, and ensure continuous service improvements across the IAM ecosystem.

What do we need from you

Now let’s talk about you:

• Privileged Access Experience: Bring 3+ years of hands‑on engineering experience managing enterprise PAM solutions, with strong expertise in CyberArk.
• Core IAM Knowledge: Demonstrate an in-depth understanding of Identity and Access Management concepts, principles, and best practices, including least privilege.
• Tertiary Technical Qualifications: Hold a Bachelor's degree in Computer Science, Information Technology, or a closely related discipline.
• Balanced Technical Mindset: Exhibit proven experience spanning daily operational support (incident resolution, debugging) and engineering delivery.
• Collaborative Communication Skills: Possess excellent communication and relationship‑building abilities to work effectively with cross‑functional technical teams and business partners.
• Desirable Platform Exposure: Bring valuable familiarity with Identity Governance and Administration (IGA) tools such as SailPoint, Entra ID, or Saviynt, or hold relevant security certifications (e.g., CISSP).

The benefits are good too!

• We offer hybrid ways of working
• An exclusive discount card for our ALH Hotels pubs & accommodation, BWS, Dan Murphy’s and other Endeavour Group brands. Through our partnership with Woolworths, you'll also enjoy discounts at Woolies supermarkets and BIG W
• As a valued member of the team, your health and wellbeing is our top priority. You will have access to a range of free services to help you live well and support your physical, mental and financial wellbeing
• Endeavour Group is full of opportunities - use our dedicated learning and development options to grow an idea, yourself, and your career. This is just the start, so dream big
• Find out more about our range of benefits and discounts here

At Endeavour, we value being a workplace where everyone’s welcome - if you meet a number of the requirements (and not all), we encourage you to apply.

What's in it for you?

We are together creators

With a portfolio that includes Dan Murphy’s, BWS, ALH Hotels, Pinnacle Drinks and more, Endeavour Group is big on sociability. Together we create the moments that bring millions of people together. And together we have more fun, create more opportunities, and score a lot more goals. We’re serious about creating a safe, inclusive and fun place to rock up to where equal opportunity is key, and flexibility is part of how we roll.

We’re all about creating a more sociable future - for our customers and each other. If this job excites you - and you’re close‑enough on the requirements, reach out, we’d love to hear from you.

You can learn more about working with us on LinkedIn or at endeavourgroupcareers.com.au.

Our Talent Team and Hiring Leaders kindly request no unsolicited resumes or approaches from Recruitment Agencies. Endeavour Group is not responsible for any fees related to unsolicited resumes.

#WeAreTogetherCreators #ComeAsYouAre #DreamBig #FeelTheEnergy #LeaveYourMark #EndeavourGroup