Senior Infrastructure Engineer - LH-08211

Paxus; South Canberra; On-site; AUD 140,000 - 190,000; Full time

Job summary

Paxus is seeking a Senior Infrastructure Engineer to design, implement and document identity and access capabilities for a major Federal Government program in Canberra. You will focus on Azure AD B2C and related eIDAM architecture, translating strategy into secure, maintainable solutions while working with architects and delivery teams.

The role requires strong governance and cyber security focus, with capability to produce detailed design artefacts and collaborate with diverse stakeholders.

Qualifications

• Extensive Azure AD B2C Custom Policy expertise including trust framework design and policy development.
• Strong knowledge of OAuth 2.0, OpenID Connect, JWT and claims-based authorisation.
• Experience uplifting and remediating Azure AD B2C implementations including governance and security control enhancement.
• Proven ability to diagnose and resolve design and access issues across identities and entitlements.
• Strong technical design and documentation capability including producing architecture artefacts.
• Git version control with common branching strategies.

Responsibilities

• Design, improve and document identity and access capabilities for a government program.
• Collaborate with architects, delivery teams and stakeholders to translate strategy into secure solutions.
• Ensure governance and cyber security expectations are met.

Skills

Azure AD B2C

Trust framework design

OAuth 2.0 / OIDC

Identity security

API security

Architecture documentation

Git versioning

Stakeholder engagement

Agile delivery

Education

Information Technology degree

Tools

Azure AD B2C tooling

Job description

Join a major Federal Government program focused on strengthening transparency and accountability. As a Senior Infrastructure Engineer, you will play a key role in designing, improving and documenting critical identity and access capabilities, with a strong focus on Azure AD B2C and related eIDAM architecture. You will work closely with architects, delivery teams and stakeholders to translate strategic direction into practical, secure and supportable solutions that meet governance and cyber security expectations.

Required Skills

• Extensive Azure AD B2C Custom Policy expertise including trust framework design, policy development, claims transformations, user journeys, REST integrations, federation, relying party policies, troubleshooting and optimisation
• Strong experience with trust framework and relying party policy structures including rationalisation, token issuance, claims mapping and reusable design patterns
• Strong identity and security protocol knowledge including OAuth 2.0, OpenID Connect, JWT, claims based authorisation, API security, token lifecycle management and secure authentication and authorisation practices
• Experience uplifting and remediating Azure AD B2C implementations including technical debt reduction, consolidation of policies and user journeys, governance and security control enhancement
• Proven ability to diagnose and resolve design and access issues across identities, authentication, authorisation, entitlements and permission
• Strong technical design and documentation capability including producing high quality solution artefacts and detailed design specifications
• Git version control experience including common branching strategies
• Confident stakeholder engagement skills with the ability to communicate clearly with both technical teams and non technical senior stakeholders
• Ability to work effectively in multidisciplinary Agile delivery teams

Nice to Have Skills

• Relevant cloud certifications
• Knowledge of IT frameworks such as ITIL and TOGAF
• Familiarity with Commonwealth ICT frameworks and governance expectations

Preferred Education and Experience

• Tertiary qualifications in Information Technology or a related discipline
• Senior level engineering and design experience, ideally in complex enterprise or government environments
• Demonstrated experience producing architecture and design documentation that supports governance and delivery

Other Requirements

• Contract to 30 June 2027 with potential extension options
• If based outside Canberra, you must be able to work to Canberra time and attend an office as required
• Must be able to obtain AGSVA Negative Vetting Level 1 security clearance, and candidates already holding an active NV1 will be highly regarded

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds, and people living with a disability. The recruitment and selection process varies, and some roles may include completion of pre-employment assessments, in-person or online interviews, psychometric testing, written assessments, scenario-based tasks, presentations, and pre‑employment checks such as medical (including drug and alcohol), criminal history, or financial. If you require an adjustment to any part of the recruitment process, including the application form or assessments completed in an alternate format, please contact me using the above details. As part of our ongoing commitment to accessibility, the Paxus website has been independently audited against (WCAG) 2.2 Level AA, with ongoing improvements continuously being made to enhance accessibility. If you experience any difficulties, please contact me on the above details.