Identity & ICAM Engineer

Profectus; Canberra; On-site; AUD 110,000 - 170,000; Full time

Job summary

Profectus is seeking ICAM Engineers to design, implement and support identity and access capabilities across secure Australian Government environments. You will work on Entra ID configuration, PAM governance, PKI management and policy enforcement.

The role emphasizes provisioning, access reviews, joiner/mover/leaver processes and federation using SAML, OAuth, and OpenID Connect. Strong documentation skills and security framework alignment are required.

Qualifications

• Experience designing and implementing identity and access management solutions in large or secure ICT environments.
• Strong hands-on experience with Microsoft Entra ID including conditional access, SSO and MFA.
• Experience with privileged access management tools and practices.
• Experience with PKI, certificate management and key management.
• Experience delivering identity governance including provisioning, access reviews and RBAC.
• Understanding of Zero Trust principles and modern access control patterns.

Responsibilities

• Design, implement and support ICAM capability across secure environments
• Configure and manage Microsoft Entra ID, including conditional access, single sign-on, multi-factor authentication and identity protection
• Implement and support privileged access management (PAM), including privileged account governance and just-in-time access
• Design and manage PKI, including certificate lifecycle and key management
• Deliver identity governance and administration, including provisioning, access reviews and joiner, mover and leaver processes
• Implement role-based and attribute-based access control aligned to least privilege
• Apply Zero Trust principles, including continuous verification and policy enforcement across users, devices and services
• Configure federation and directory services using standards such as SAML, OAuth 2.0, OpenID Connect and SCIM
• Integrate identity and access controls with applications, platforms and cloud services
• Align identity and access solutions to security frameworks such as the ISM, Essential Eight and PSPF
• Produce and maintain technical documentation, standards and operational procedures

Skills

Microsoft Entra ID

Zero Trust

Identity governance

PAM

Federation & standards

Education

Microsoft SC-300 certification

CyberArk certification

SailPoint certification

Tools

Active Directory

LDAP

PKI

SAML/OAuth/OpenID

Job description

Profectus is inviting expressions of interest from Identity, Credential and Access Management (ICAM) Engineers for likely upcoming work across secure Australian Government environments. We are seeking engineers who can design, implement and support modern identity and access capability to a high standard in structured, well-governed settings.

Key Responsibilities

• Design, implement and support ICAM capability across secure environments
• Configure and manage Microsoft Entra ID, including conditional access, single sign-on, multi-factor authentication and identity protection
• Implement and support privileged access management (PAM), including privileged account governance and just-in-time access
• Design and manage public key infrastructure (PKI), including certificate lifecycle and key management
• Deliver identity governance and administration, including provisioning, access reviews and joiner, mover and leaver processes
• Implement role-based and attribute-based access control aligned to least privilege
• Apply Zero Trust principles, including continuous verification and policy enforcement across users, devices and services
• Configure federation and directory services using standards such as SAML, OAuth 2.0, OpenID Connect and SCIM
• Integrate identity and access controls with applications, platforms and cloud services
• Align identity and access solutions to security frameworks such as the ISM, Essential Eight and PSPF
• Produce and maintain technical documentation, standards and operational procedures

Required Experience

• Demonstrated experience designing and implementing identity and access management solutions in large or secure ICT environments
• Strong hands-on experience with Microsoft Entra ID, including conditional access, single sign-on and multi-factor authentication
• Experience with privileged access management tools and practices
• Experience with public key infrastructure, certificate management and key management
• Experience delivering identity governance, including provisioning, access reviews and role-based access control
• Understanding of Zero Trust principles and modern access control patterns
• Working knowledge of federation and identity standards such as SAML, OAuth 2.0, OpenID Connect and SCIM
• Familiarity with directory services such as Active Directory and LDAP
• Strong documentation skills and the ability to work with technical and non-technical stakeholders
• Relevant certifications such as Microsoft Identity and Access Administrator (SC-300), CyberArk, SailPoint or comparable
• Experience implementing identity solutions aligned to the ISM, Essential Eight and PSPF
• Experience with identity governance platforms such as SailPoint, Saviynt or Microsoft Entra ID Governance
• Experience integrating identity and access management across hybrid and cloud environments
• Prior experience delivering within Australian Government environments

Security Clearance Requirement

• Must be an Australian Citizen
• Must hold a current AGSVA NV1 Security Clearance (mandatory requirement)

Why Profectus

Profectus works with government and private sector customers to deliver trusted, secure ICT capability across complex environments. Our delivery is backed by ISO 2701 01 certified security management, and we take a long-term, relationship-driven approach that supports our consultants and our clients well beyond a single project.