Principal Engineer - Identity Access Management

APRA Career Site; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

APRA is seeking a Principal Engineer – Identity & Access Management to design, implement, and operate enterprise IAM across on‑premises and cloud environments. You will lead identity provisioning, authentication, and access governance while guiding senior stakeholders on IAM strategy.

You will own privileged access controls (CyberArk, PIM), automation with PowerShell, and Zero Trust principles, collaborating with Cyber Security and Technology teams to uplift APRA's identity platform estate.

Qualifications

• Extensive experience managing enterprise Identity and Access Management environments.
• Strong expertise across Active Directory, Microsoft Entra ID, Microsoft 365 and hybrid identity environments.
• Hands-on experience with IAM technologies including SSO, MFA, Conditional Access and passwordless authentication.
• Experience managing identity governance, access reviews, RBAC and identity lifecycle processes.
• Proven experience administering Privileged Access Management solutions, ideally including CyberArk and Microsoft PIM.
• Strong PowerShell scripting and automation capabilities.
• Knowledge of Zero Trust principles, least privilege access models and privileged access controls.
• Experience supporting identity services across Azure, Microsoft 365 and hybrid cloud environments.
• Strong problem-solving and troubleshooting skills within complex enterprise environments.
• An understanding of security frameworks such as the ACSC Essential Eight, ISM and PSPF.

Responsibilities

• Design, implement and support enterprise IAM services across Active Directory, Microsoft Entra ID, Microsoft 365 and Azure.
• Manage identity lifecycle services and automation, supporting Joiner, Mover and Leaver (JML) processes.
• Deliver and maintain modern authentication capabilities, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access and passwordless authentication.
• Administer identity governance controls, access reviews, role-based access controls and access certification processes.
• Manage privileged access management solutions including CyberArk and Microsoft Privileged Identity Management (PIM).
• Support and govern workforce, privileged and non-human identities, including service accounts, application identities and emerging AI agent identities.
• Integrate business applications with enterprise authentication and authorisation services.
• Drive automation and continuous improvement across identity provisioning, access management and operational processes.
• Provide expert Level 3 support and technical leadership for complex identity and access issues.
• Contribute to technology projects, security initiatives and platform uplift programs that strengthen APRA's technology environment.

Skills

Identity & Access Management

Active Directory

Microsoft Entra ID

Microsoft 365

SSO

MFA

Conditional Access

Passwordless

RBAC

Privileged Access Management

CyberArk

PowerShell

Zero Trust

PIM

Tools

CyberArk

Microsoft PIM

Job description

The role

Principal Engineer – Identity & Access Management (IAM) is responsible for the design, implementation, administration, maintenance and continuous improvement of APRA's enterprise identity platforms and access management services. The role supports the secure management and governance of workforce, privileged and non-human identities, including application, service and AI agent identities, across on-premises and cloud environments, while enabling secure and effective access to business services.

The role is responsible for delivering and supporting IAM capabilities across identity lifecycle management, authentication, access governance, privileged access and identity security controls. The position also provides technical advice to senior stakeholders on identity and access management matters and contributes to the development and improvement of IAM solutions in line with APRA's security, operational and regulatory requirements.

The team

Reporting to the Infrastructure Manager within the Technology division, the Principal Engineer – Identity & Access Management is a member of the Core Infrastructure team. The role works closely with the Cyber Security function, other product teams within Technology and stakeholders across APRA in the delivery and operation of enterprise identity services.

Key responsibilities

• Design, implement and support enterprise IAM services across Active Directory, Microsoft Entra ID, Microsoft 365 and Azure.
• Manage identity lifecycle services and automation, supporting Joiner, Mover and Leaver (JML) processes.
• Deliver and maintain modern authentication capabilities, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access and passwordless authentication.
• Administer identity governance controls, access reviews, role-based access controls and access certification processes.
• Manage privileged access management solutions including CyberArk and Microsoft Privileged Identity Management (PIM).
• Support and govern workforce, privileged and non-human identities, including service accounts, application identities and emerging AI agent identities.
• Integrate business applications with enterprise authentication and authorisation services.
• Drive automation and continuous improvement across identity provisioning, access management and operational processes.
• Provide expert Level 3 support and technical leadership for complex identity and access issues.
• Contribute to technology projects, security initiatives and platform uplift programs that strengthen APRA's technology environment.

To work with us you will need to be an Australian Citizen and be able to gain a security clearance.

About you

• Extensive experience managing enterprise Identity and Access Management environments.
• Strong expertise across Active Directory, Microsoft Entra ID, Microsoft 365 and hybrid identity environments.
• Hands-on experience with IAM technologies including SSO, MFA, Conditional Access and passwordless authentication.
• Experience managing identity governance, access reviews, RBAC and identity lifecycle processes.
• Proven experience administering Privileged Access Management solutions, ideally including CyberArk and Microsoft PIM.
• Strong PowerShell scripting and automation capabilities.
• Knowledge of Zero Trust principles, least privilege access models and privileged access controls.
• Experience supporting identity services across Azure, Microsoft 365 and hybrid cloud environments.
• Strong problem-solving and troubleshooting skills within complex enterprise environments.
• An understanding of security frameworks such as the ACSC Essential Eight, ISM and PSPF.