Senior IAM Engineer: Enterprise Identity & Access Lead

APRA Career Site; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

APRA is seeking a Principal Engineer – Identity & Access Management to design, implement, and operate enterprise IAM across on‑premises and cloud environments. You will lead identity provisioning, authentication, and access governance while guiding senior stakeholders on IAM strategy.

You will own privileged access controls (CyberArk, PIM), automation with PowerShell, and Zero Trust principles, collaborating with Cyber Security and Technology teams to uplift APRA's identity platform estate.

Qualifications

• Extensive experience managing enterprise Identity and Access Management environments.
• Strong expertise across Active Directory, Microsoft Entra ID, Microsoft 365 and hybrid identity environments.
• Hands-on experience with IAM technologies including SSO, MFA, Conditional Access and passwordless authentication.
• Experience managing identity governance, access reviews, RBAC and identity lifecycle processes.
• Proven experience administering Privileged Access Management solutions, ideally including CyberArk and Microsoft PIM.
• Strong PowerShell scripting and automation capabilities.
• Knowledge of Zero Trust principles, least privilege access models and privileged access controls.
• Experience supporting identity services across Azure, Microsoft 365 and hybrid cloud environments.
• Strong problem-solving and troubleshooting skills within complex enterprise environments.
• An understanding of security frameworks such as the ACSC Essential Eight, ISM and PSPF.

Responsibilities

• Design, implement and support enterprise IAM services across Active Directory, Microsoft Entra ID, Microsoft 365 and Azure.
• Manage identity lifecycle services and automation, supporting Joiner, Mover and Leaver (JML) processes.
• Deliver and maintain modern authentication capabilities, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access and passwordless authentication.
• Administer identity governance controls, access reviews, role-based access controls and access certification processes.
• Manage privileged access management solutions including CyberArk and Microsoft Privileged Identity Management (PIM).
• Support and govern workforce, privileged and non-human identities, including service accounts, application identities and emerging AI agent identities.
• Integrate business applications with enterprise authentication and authorisation services.
• Drive automation and continuous improvement across identity provisioning, access management and operational processes.
• Provide expert Level 3 support and technical leadership for complex identity and access issues.
• Contribute to technology projects, security initiatives and platform uplift programs that strengthen APRA's technology environment.

Skills

Identity & Access Management

Active Directory

Microsoft Entra ID

Microsoft 365

SSO

MFA

Conditional Access

Passwordless

RBAC

Privileged Access Management

CyberArk

PowerShell

Zero Trust

PIM

Tools

CyberArk

Microsoft PIM

Job description

APRA is seeking a Principal Engineer – Identity & Access Management to design, implement, and operate enterprise IAM across on‑premises and cloud environments. You will lead identity provisioning, authentication, and access governance while guiding senior stakeholders on IAM strategy.

You will own privileged access controls (CyberArk, PIM), automation with PowerShell, and Zero Trust principles, collaborating with Cyber Security and Technology teams to uplift APRA's identity platform estate.