Identity Engineer: IAM & Cloud Access Architect

Talent; Auckland; On-site; NZD 110,000 - 160,000; Full time

Job summary

Talent is seeking an experienced Identity Engineer for a 12-month contract in Auckland CBD. You will lead hands-on IAM initiatives, modernising workforce identity across Entra ID and Azure while coordinating with security teams and application owners.

You will implement federation, SSO and MFA, strengthen privileged access, and drive identity governance across hybrid environments, ensuring secure, scalable identity services for ~10,000 users.

Qualifications

• Experience in Workforce Identity and Access Management.
• Hands-on with Microsoft Entra ID, Azure and Active Directory.
• Experience integrating applications with enterprise identity platforms.
• Knowledge of Identity Governance and Administration principles.
• Practical experience with privileged access, access controls and toxic entitlement combinations.
• Strong understanding of federation, SSO, MFA and modern authentication standards.
• Knowledge of RBAC, least privilege and identity life-cycle management.
• Experience supporting identity services across hybrid cloud and on-premises environments.

Responsibilities

• Modernise workforce identity solutions across Microsoft Entra ID and Azure.
• Integrate enterprise applications and systems with identity platforms during cloud migration.
• Implement and improve Identity Governance and Administration controls.
• Strengthen privileged access and least-privilege practices.
• Identify and resolve toxic access and conflicting entitlement combinations.
• Support identity life-cycle processes, access certifications and RBAC.
• Design and implement federation, authentication, SSO and MFA solutions.
• Collaborate with architects, security teams and application owners to close identity-control gaps.
• Improve the security and usability of the employee identity experience.
• Provide clear technical documentation and guidance throughout delivery.

Skills

Workforce Identity

IAM

Microsoft Entra ID

Azure

Active Directory

Federation

SSO

MFA

RBAC

Identity governance

Tools

Azure

Active Directory

Microsoft Entra ID

Job description

Talent is seeking an experienced Identity Engineer for a 12-month contract in Auckland CBD. You will lead hands-on IAM initiatives, modernising workforce identity across Entra ID and Azure while coordinating with security teams and application owners.

You will implement federation, SSO and MFA, strengthen privileged access, and drive identity governance across hybrid environments, ensuring secure, scalable identity services for ~10,000 users.