Identity & Secrets Platform Lead — Just‑In‑Time PAM

Firmus Technologies Pty Ltd.; Sydney; On-site; AUD 260,000 - 380,000; Full time

Job summary

Firmus Technologies Pty Ltd. seeks a Principal Platform Identity Engineer to build and operate the trust plane for a global AI infra estate.

You will manage workforce identity, internal PKI, and secrets management with automated provisioning, CI/CD integration, and auditable access controls. This hands-on senior role requires deep expertise in IAM, PKI, and secret management, with dual-control custody and just-in-time access for emergencies.

Qualifications

• Experience designing, building and operating identity and access management platforms.
• Strong certificate lifecycle management experience.
• Experience with secrets management platforms and rotation policies.
• Practical experience with privileged access management and just-in-time elevation.
• Understanding of zero-trust architecture in multi-tenant environments.
• Experience embedding identity and secrets into CI/CD and IaC workflows.
• Strong scripting/programming ability (Python/Go/Bash).
• Escalation point for identity and security faults in 24/7 production environments.
• Ability to articulate trust-model decisions to engineers and auditors.

Responsibilities

• Design, build and operate the workforce and service identity platform (SSO and IdP integration).
• Design, build and operate internal PKI and certificate lifecycle; manage secrets platform with rotation and audit.
• Automate identity, certificate and secrets provisioning as code within CI/CD and IaC pipelines.
• Own the privileged access management model with just-in-time elevation and break-glass procedures.
• Enforce least-privilege access patterns and provide audit-ready evidence for audits.
• Design resilience for the trust plane, including rotation and key custody under dual control.
• Maintain dual-control custody for production cryptographic material with auditable records.
• Harden services and provide evidence for ISO 27001 and SOC 2 standards.

Skills

Identity IAM platforms

Single sign-on

Certificate lifecycle

Secrets management

Privileged access mgmt

Just-in-time elevation

Zero-trust

CI/CD integration

Infrastructure-as-code

Python/Go/Bash

Auditing & compliance

PKI/HSM

Technical communication

Education

Bachelor's degree in computer science or engineering

Tools

authentik

Okta

Keycloak

Entra ID

HashiCorp Vault

OpenBao

step-ca

Job description

Firmus Technologies Pty Ltd. seeks a Principal Platform Identity Engineer to build and operate the trust plane for a global AI infra estate.

You will manage workforce identity, internal PKI, and secrets management with automated provisioning, CI/CD integration, and auditable access controls. This hands-on senior role requires deep expertise in IAM, PKI, and secret management, with dual-control custody and just-in-time access for emergencies.