Senior Platform Identity & Secrets Engineer

Firmus Technologies Pty Ltd.; City of Melbourne; On-site; AUD 180,000 - 240,000; Full time

Job summary

Firmus Technologies Pty Ltd. seeks a Principal Platform Identity Engineer to design and operate the trust plane for the estate’s authentication and access. You will own workforce identity, internal PKI, and secrets management, integrating these systems into CI/CD pipelines.

The role demands deep hands-on expertise and accountability for out-of-hours operations. You will enforce least-privilege access, manage just-in-time elevation, and ensure audit-ready evidence for ISO 27001 and SOC 2.

Qualifications

• Deep experience designing, building and operating IAM platforms.
• Strong experience with certificate lifecycle management and internal PKI.
• Experience with secrets management platforms including rotation, policy and audit.
• Privileged access management, just-in-time elevation and break-glass design.
• Experience with hardware security modules and dual-control custody.
• Understanding of zero-trust architecture in multi-tenant environments.
• CI/CD integration of identity and secrets into IaC workflows.
• Scripting/programming for identity automation (Python/Go/Bash).
• Senior escalation point for identity and security faults in 24/7 production.
• Knowledge of ISO 27001/SOC 2 evidence and internal controls.

Responsibilities

• Design, build and operate workforce and service identity platform, including SSO and provider integration.
• Design, build and operate internal PKI and certificate lifecycle management; manage secrets platform.
• Automate provisioning via code embedded in CI/CD and IaC workflows.
• Own privileged access model: just-in-time elevation with change-record linkage.
• Enforce least-privilege access; report on model compliance; audit by Security.
• Design trust plane resilience including rotation of certs and secrets.
• Maintain key custody under dual control with auditable records and quorum.
• Provide expert guidance for identity and secrets faults; mentor engineers.
• Ensure evidence for ISO 27001/SOC 2 through controls design and review.

Skills

IAM platforms

SSO integration

Certificate lifecycle management

Secrets management

Privileged access management

Hardware security modules

Zero-trust architecture

CI/CD integration

Scripting (Python/Go/Bash)

24/7 production escalation

ISO27001 / SOC2 evidence

Trust-model communication

Education

Bachelor's degree in CS/Engineering or equivalent

Tools

HashiCorp Vault

OpenBao

step-ca

authentik

Okta

Keycloak

Entra ID

Job description

Firmus Technologies Pty Ltd. seeks a Principal Platform Identity Engineer to design and operate the trust plane for the estate’s authentication and access. You will own workforce identity, internal PKI, and secrets management, integrating these systems into CI/CD pipelines.

The role demands deep hands-on expertise and accountability for out-of-hours operations. You will enforce least-privilege access, manage just-in-time elevation, and ensure audit-ready evidence for ISO 27001 and SOC 2.