Senior Software Engineer

Ontrack Systems Aus Pty; Canberra; On-site; AUD 120,000 - 160,000; Full time

Job summary

Ontrack Systems Aus Pty is seeking a Senior IAM Software Engineer to lead design, development and support of enterprise IAM solutions built on Microsoft technologies. The role focuses on Active Directory, ADFS, and Entra ID, with deep expertise in identity governance, authentication, and access management across hybrid environments.

You will mentor engineers, collaborate with architecture, security, and applications teams, and drive secure access across on‑prem and cloud systems using .NET,

Qualifications

• Experience designing and implementing enterprise IAM using Active Directory, ADFS, and Microsoft Entra ID (Azure AD).
• Hands-on knowledge of authentication protocols such as SAML, OAuth2, and OpenID Connect.
• Experience automating IAM processes using PowerShell and integrating with cloud/on‑prem environments.
• Ability to lead the technical architecture and delivery of IAM solutions with focus on documentation and compliance.

Responsibilities

• Design and implement scalable IAM solutions leveraging Entra ID, AD, and MIM.
• Develop custom IAM components and workflows using C#, ASP.NET, and .NET libraries.
• Integrate authentication/authorization into apps using OAuth2, OpenID Connect, and SAML.
• Automate identity lifecycle processes including provisioning and access reviews.
• Collaborate with cross-functional teams to align IAM with security requirements.
• Troubleshoot identity issues across cloud and on‑prem environments.
• Contribute to IAM documentation, standards, and capability uplift.
• Mentor junior engineers and drive IAM knowledge sharing.

Skills

Active Directory

ADFS

Entra ID/Azure AD

C#

.NET

PowerShell

OWIN

OAuth2

OpenID Connect

SAML

Tools

Microsoft Identity Manager (MIM)

Azure services

Job description

JOB DETAILS

Software Engineers have experience overseeing software development projects, writing optimised code, and provide technical leadership to a team of software engineers. They are responsible for the quality and functionality of the software produced by their team. The Senior Identity and Access Management (IAM) Software Engineer is a key technical role responsible for the design, development, and ongoing support of enterprise identity and access management solutions built on Microsoft technologies. This position requires deep expertise in Active Directory, Active Directory Federation Services (ADFS), Microsoft Entra ID (formerly Azure AD), and custom IAM solutions developed using Microsoft .NET. The engineer will contribute to the secure management of identities, authentication, authorization, and access governance across a hybrid environment. They will work closely with architecture, security, infrastructure, and application development teams to ensure secure and efficient access to corporate systems and data.

KEY DUTIES AND RESPONSIBILITIES

• Design and implement scalable IAM solutions leveraging Microsoft Entra ID, Active Directory, and Microsoft Identity Manager (MIM).
• Develop custom IAM components and workflows using the Microsoft .NET framework and libraries (C#, ASP.NET, OWIN).
• Integrate authentication and authorization mechanisms into enterprise and web applications using protocols such as OAuth2, OpenID Connect, and SAML.
• Implement and maintain identity lifecycle processes, including provisioning, deprovisioning, and access reviews.
• Automate identity tasks using PowerShell and Azure-based tools, ensuring repeatability and compliance.
• Collaborate with cross-functional teams to align IAM solutions with business and security requirements.
• Troubleshoot complex identity issues and lead resolution activities across cloud and on-prem environments.
• Contribute to documentation, standards, and continuous improvement of IAM practices and toolsets.
• Provide technical mentoring to junior team members and contribute to IAM capability uplift.

ESSENTIAL CRITERIA

• 1. Demonstrated experience designing and implementing enterprise IAM solutions using Active Directory, and Active Directory Federation Services (ADFS) and Microsoft Entra ID (Azure AD).
• 2. Proven knowledge and practical implementation of authentication and authorization protocols such as SAML, OAuth2, and OpenID Connect.
• 3. Experience automating IAM processes using PowerShell and integrating with Microsoft cloud and on-premises platforms.
• 4. Ability to lead the technical architecture and delivery of IAM solutions, with a strong focus on documentation, integration, and compliance.

DESIRABLE CRITERIA

• 1. Experience working in hybrid identity environments, integrating on-prem Active Directory with cloud-based identity services (e.g., Azure AD Connect).
• 2. Strong .NET development experience (C#, ASP.NET Core) focused on building custom identity and access management workflows and services.
• 3. Familiarity with advanced Entra features such as Conditional Access, Identity Governance, and B2B/B2C user flows.
• 4. Relevant qualifications or certifications in Microsoft identity and security technologies
• 5. Experience mentoring junior engineers and contributing to IAM knowledge-sharing and capability development.

SECURITY CLEARANCE

Must be able to obtain NV1 clearance

CONTRACT DURATION

12 Months

EXTENSION PERIOD

24 Months

LOCATION OF WORK

ACT, QLD