Identity Engineer

Talent; Auckland; On-site; NZD 110,000 - 160,000; Full time

Job summary

Talent is seeking an experienced Identity Engineer for a 12-month contract in Auckland CBD. You will lead hands-on IAM initiatives, modernising workforce identity across Entra ID and Azure while coordinating with security teams and application owners.

You will implement federation, SSO and MFA, strengthen privileged access, and drive identity governance across hybrid environments, ensuring secure, scalable identity services for ~10,000 users.

Qualifications

• Experience in Workforce Identity and Access Management.
• Hands-on with Microsoft Entra ID, Azure and Active Directory.
• Experience integrating applications with enterprise identity platforms.
• Knowledge of Identity Governance and Administration principles.
• Practical experience with privileged access, access controls and toxic entitlement combinations.
• Strong understanding of federation, SSO, MFA and modern authentication standards.
• Knowledge of RBAC, least privilege and identity life-cycle management.
• Experience supporting identity services across hybrid cloud and on-premises environments.

Responsibilities

• Modernise workforce identity solutions across Microsoft Entra ID and Azure.
• Integrate enterprise applications and systems with identity platforms during cloud migration.
• Implement and improve Identity Governance and Administration controls.
• Strengthen privileged access and least-privilege practices.
• Identify and resolve toxic access and conflicting entitlement combinations.
• Support identity life-cycle processes, access certifications and RBAC.
• Design and implement federation, authentication, SSO and MFA solutions.
• Collaborate with architects, security teams and application owners to close identity-control gaps.
• Improve the security and usability of the employee identity experience.
• Provide clear technical documentation and guidance throughout delivery.

Skills

Workforce Identity

IAM

Microsoft Entra ID

Azure

Active Directory

Federation

SSO

MFA

RBAC

Identity governance

Tools

Azure

Active Directory

Microsoft Entra ID

Job description

12-month contract | Auckland CBD

The Opportunity

We are looking for an experienced Identity Engineer to join a large-scale identity modernisation programme.

This is a hands-on engineering role focused initially on Workforce Identity and Access Management. You will work closely with Application Owners, Identity Architects and Security teams to modernise how identity is managed across an estate of approximately 10,000 users.

As the organisation continues its cloud migration, you will help integrate applications and information systems with its identity platforms, strengthen access controls and support the implementation of effective identity governance.

This is an opportunity to work across the full identity life-cycle, not simply administer an existing platform.

What You’ll Be Doing

• Engineering and modernising workforce identity solutions across Microsoft Entra ID and Azure.
• Integrating enterprise applications and systems with identity platforms during cloud migration.
• Implementing and improving Identity Governance and Administration controls.
• Strengthening privileged access and least-privilege practices.
• Identifying and resolving toxic access and conflicting entitlement combinations.
• Supporting identity life-cycle processes, access certifications and role-based access controls.
• Designing and implementing federation, authentication, SSO and MFA solutions.
• Working with Application Owners, Identity Architecture and Security teams to address identity-control gaps.
• Improving the security and usability of the employee identity experience.
• Providing clear technical documentation and guidance throughout delivery.

What We’re Looking For

You will be an experienced Identity Engineer with a strong understanding of IAM across the full identity life-cycle. You should be comfortable moving between technical design and hands-on implementation within a large, complex environment.

Ideally, You Will Bring

• Strong experience in Workforce Identity and Access Management.
• Hands-on expertise with Microsoft Entra ID, Azure and Active Directory.
• Experience integrating applications with enterprise identity platforms.
• Knowledge of Identity Governance and Administration principles and technologies.
• Practical experience with privileged access, access controls and toxic entitlement combinations.
• Strong understanding of federation, SSO, MFA and modern authentication standards.
• Knowledge of RBAC, least privilege and identity life-cycle management.
• Experience supporting identity services across hybrid cloud and on-premises environments.
• The ability to work effectively with architects, security specialists, application teams and business stakeholders.

If you are a hands-on Identity Engineer with strong workforce IAM experience and enjoy solving complex identity and access challenges, we would like to hear from you.