Identity Platform Lead: Cloud Migration & Access Governance

Randstad

Auckland

On-site

NZD 120,000 - 180,000

Full time

8 days ago

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Randstad New Zealand is seeking an Identity Engineer (WIAM & Cloud Migration) for a 12-month contract. You will direct technical delivery for a major cloud transition and manage identity architecture within a hybrid enterprise environment.

This senior role requires IAM specialization, strong Microsoft Entra ID and Azure AD expertise, and the ability to lead cross-functional teams to implement SSO, MFA, RBAC/ABAC, and SailPoint governance across on-prem and cloud workloads.

Qualifications

IAM Specialisation: Extensive engineering experience in Identity and Access Management, with a proven history of delivering technical solutions in hybrid environments rather than advisory-only capacities.
Microsoft Stack Expertise: Advanced technical knowledge of Microsoft identity platforms, including Entra ID (Azure AD), Active Directory, Conditional Access policies, and Azure RBAC.
Security Control Application: Practical experience implementing privileged access controls, resolving toxic access combinations, and managing directory services during active cloud migrations.
Federation Protocols: Solid understanding of modern identity protocols, directory structures, and system integration methods.
Strategic Communication: Exceptional communication skills with a demonstrated capability to direct technical specialists, risk teams, and architecture business partners effectively.

Responsibilities

Identity Platform Modernisation: Define technical specifications to connect information systems to the identity platform as cloud migration progresses, ensuring reliable and secure operations across the hybrid estate.
Access Control Enforcement: Design and implement privileged access controls, manage Separation of Duties (SoD) to address toxic entitlement combinations, and deploy RBAC/ABAC models aligned with a least-privilege methodology.
Cloud Integration: Direct Identity and Solution Architects to identify and resolve identity control gaps that emerge as workloads shift between on-premises and cloud environments.
Authentication Standards: Implement Single Sign-On (SSO), multi-factor authentication (MFA) protocols, and federation models between enterprise applications and primary identity providers.
Governance Frameworks: Drive the implementation of SailPoint to govern access across the estate, while ensuring clear operational documentation is maintained.