identity engineer

Randstad Digital New Zealand; Auckland; On-site; NZD 110,000 - 130,000; Full time

Job summary

Randstad Digital New Zealand is seeking an Identity Engineer for a 12-month contract in Auckland. This critical role focuses on managing identity architecture during a major cloud transition, directing application and security teams to modernize access controls and governance.

The ideal candidate will have extensive experience in Identity and Access Management, especially within hybrid environments. You'll be responsible for ensuring that security standards are upheld across various platforms, engaging directly with technical specialists to achieve organizational goals.

Through your strategic leadership, you will implement robust access control measures and drive the governance of identity systems. Apply now if you're ready for this challenge!

Qualifications

• Minimum 7 years of experience in Identity Engineering.
• Extensive engineering experience in Identity and Access Management.
• Advanced technical knowledge of Microsoft identity platforms.

Responsibilities

• Define technical specifications to connect information systems to the identity platform.
• Design and implement privileged access controls.
• Direct Identity and Solution Architects to resolve identity control gaps.

Skills

IAM Specialisation

Microsoft Stack Expertise

Security Control Application

Federation Protocols

Strategic Communication

Education

Bachelor Degree

Post Graduate Diploma

Job description

Identity Engineer (WIAM & Cloud Migration)

The Opportunity – 12 Month Contract

This critical technical role within the Workforce Identity (WIAM) team directs technical delivery for a major cloud transition. You will manage identity architecture and enforce security governance within a complex enterprise environment.

You will direct application and security teams to modernise access controls and governance across hybrid infrastructure. While initially managing the large workforce estate, the role offers pathways to lead customer identity (CIAM) systems.

Key Responsibilities

• Identity Platform Modernisation: Define technical specifications to connect information systems to the identity platform as cloud migration progresses, ensuring reliable and secure operations across the hybrid estate.
• Access Control Enforcement: Design and implement privileged access controls, manage Separation of Duties (SoD) to address toxic entitlement combinations, and deploy RBAC/ABAC models aligned with a least‑privilege methodology.
• Cloud Integration: Direct Identity and Solution Architects to identify and resolve identity control gaps that emerge as workloads shift between on‑premises and cloud environments.
• Authentication Standards: Implement Single Sign‑On (SSO), multi‑factor authentication (MFA) protocols, and federation models between enterprise applications and primary identity providers.
• Governance Frameworks: Drive the implementation of SailPoint to govern access across the estate, while ensuring clear operational documentation is maintained.

Skills and Experience Required

• IAM Specialisation: Extensive engineering experience in Identity and Access Management, with a proven history of delivering technical solutions in hybrid environments rather than advisory‑only capacities.
• Microsoft Stack Expertise: Advanced technical knowledge of Microsoft identity platforms, including Entra ID (Azure AD), Active Directory, Conditional Access policies, and Azure RBAC.
• Security Control Application: Practical experience implementing privileged access controls, resolving toxic access combinations, and managing directory services during active cloud migrations.
• Federation Protocols: Solid understanding of modern identity protocols, directory structures, and system integration methods.
• Strategic Communication: Exceptional communication skills with a demonstrated capability to direct technical specialists, risk teams, and architecture business partners effectively.

Desirable Criteria

• Familiarity with Customer Identity (CIAM) platforms such as Optimal, Okta, or Azure AD B2C.
• Exposure to Privileged Access Management (PAM) or Identity Governance and Administration (IGA) solutions like SailPoint.

How to Apply

If you are an experienced Identity Engineer looking to apply your technical expertise to a large‑scale cloud transformation in Auckland, please apply now.

For a discussion regarding the environment and delivery expectations, please contact Amaan Kazmi at [e-mail] or call 022 060 7986.

At Randstad, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.

Qualifications

Minimum 7 years of experience in Identity Engineering. Bachelor Degree. Post Graduate Diploma.