Senior Identity & Security Engineer — Hybrid, Cloud & IAM

SEC Victoria; Melbourne; Hybrid; AUD 110,000 - 140,000; Full time

Job summary

SEC Victoria is seeking a senior security engineer to strengthen identity governance, access controls, and cloud security across Azure, AWS, and on‑prem ecosystems. You will lead privileged access programs, MFA strategies, and IGA implementations while driving automation and secure operations.

You will collaborate with GRC, Architecture, and Technology teams to translate security requirements into scalable, practical controls and to improve threat detection and incident response across SEC’s

Qualifications

• Experience delivering identity and access management capabilities including joiner/mover/leaver, provisioning/deprovisioning, access reviews, RBAC, privileged access, MFA, IGA and Conditional Access.
• Hands-on expertise with Microsoft 365 E5 security technologies (Defender XDR, Defender for Endpoint, Intune, Purview, Microsoft Sentinel) and related security monitoring.
• Proven ability to automate and integrate security capabilities using PowerShell, Python, APIs, Microsoft Graph, KQL and IaC, with strong troubleshooting and stakeholder skills.

Responsibilities

• Shape and maintain SEC Victoria's identity and access governance, privileged access, and authentication controls across cloud and on-prem environments.
• Collaborate with GRC, Architecture, App & Cloud Security, and Technology teams to enhance security engineering and operational resilience.

Skills

Identity & access mgmt

M365 E5 security

Automation scripting

Job description

SEC Victoria is seeking a senior security engineer to strengthen identity governance, access controls, and cloud security across Azure, AWS, and on‑prem ecosystems. You will lead privileged access programs, MFA strategies, and IGA implementations while driving automation and secure operations.

You will collaborate with GRC, Architecture, and Technology teams to translate security requirements into scalable, practical controls and to improve threat detection and incident response across SEC’s