Senior Security Specialist

Recruit I.T.; Auckland; On-site; NZD 150,000 - 190,000; Full time

Job summary

Recruit I.T. is seeking a Senior Security Specialist for a major New Zealand bank in Auckland. The role focuses on identity security, AD/Entra ID architecture, and cloud identity integrations, with a hands-on, autonomous squad environment.

You will support Microsoft AD and Entra ID, enhance secure remote access, and help shape the next-generation workplace identity solution while advising on identity governance and security strategies.

Qualifications

• Experience managing Active Directory in a large enterprise.
• Strong architecture skills across AD/Entra ID and cloud identity integrations.
• Experience with identity security management, governance and entitlement management.

Responsibilities

• Support existing Microsoft AD and Azure AD (Entra ID) domains and forests.
• Improve secure remote connection solutions, including privileged session management.
• Build next-generation workplace identity solution and cloud identity connections.
• Advise on identity management across squads and stakeholders.
• Participate in a 24x7 on-call support roster.

Skills

Active Directory

Entra ID

Cloud identity

Identity governance

Entitlement management

PowerShell scripting

Microsoft Graph APIs

Azure REST APIs

Leadership

Team collaboration

Tools

Microsoft Graph APIs

Azure Resource Manager REST APIs

Job description

Are you an identity specialist who wants hands-on work at enterprise scale with real influence over how it’s done? Our client, a major New Zealand bank, is looking for a Senior Security Specialist to join its Identity & Integration platform. The platform builds and manages the solutions that will take the bank into its digital future, including modern Identity and Access Management and Identity Security.

You’ll sit in a small, autonomous Identity Security squad within the Engineering Practice. The squad decides how it prioritises its own work, and it is supporting today’s workplace identity estate while building the next one. The team works in a T-shaped way, so you’ll cover many facets of engineering across a given week. Your duties include, but are not limited to:

• Supporting existing Microsoft AD and Azure AD (Entra ID) domains and forests
• Supporting and improving secure remote connection solutions, including privileged session management
• Building the next-generation workplace identity solution
• Consulting on and building out cloud identity connections
• Acting as the voice of engineering with squads and stakeholders, advising on how identity should be managed
• Participating in a 24x7 on-call support roster

Experience and Qualifications

• Active Directory and Domain Controller management expertise in a large enterprise
• Active Directory and Entra ID architecture skills
• Cloud identity expertise, with practical experience across modern and legacy authentication protocols (SAML, SCIM, B2C, OAuth, OIDC, OpenID)
• Experience with identity security management, identity governance and entitlement management in Microsoft Entra ID
• Experience federating identity solutions
• Scripting experience (PowerShell/Batch) to query AD and Entra ID for advanced reporting, using Microsoft Graph APIs and Azure Resource Manager REST APIs
• Proven initiative, strong problem solving, and leadership shown in your role
• The ability to work independently and as a key part of a team