Identity Access Management Security Advisor

About the role

Randstad is looking for an experienced Identity and Access Management Security Advisor in Brisbane to lead the strategic design, governance and assurance of IDAM and PAM capabilities across a complex enterprise. As principal subject matter expert, you will bridge technology architecture and business stakeholders to safeguard human, non-human and workload identities, with a focus on Zero Trust architecture and APRA regulatory compliance.

Key responsibilities

• Lead the strategic design, roadmap and target architecture for enterprise IDAM, aligned with Zero Trust principles and APRA regulatory requirements.
• Provide expert advisory and independent oversight across identity lifecycle management, privileged access management (PAM) and identity governance and administration (IGA).
• Design, mature and validate PAM controls such as credential vaulting, session management, Just-In-Time (JIT) access and Zero Standing Privilege (ZSP) frameworks.
• Lead the uplift and governance of authentication and federation architectures, including phishing-resistant MFA (FIDO2/WebAuthn), SAML 2.0, OAuth 2.0 and cloud directory integrations.
• Perform security assessments, control testing and configuration reviews on IAM platforms to maintain Separation of Duties (SoD) and remediate identity risks.

Required profile

• Minimum 7+ years of hands-on experience in identity and access management, with deep expertise in privileged access management.
• 5+ years of hands-on experience with enterprise identity platforms, specifically Okta, covering governance, configuration review and security assurance.
• Proven track record implementing or validating ZSP, JIT access models and SoD controls in regulated environments.
• Background in regulated environments such as APRA CPS 234/230, ISO 27001 or NIST, ideally with certifications such as CISSP, CISM, CISA or vendor IAM/PAM credentials.
• Brisbane-based candidate with unlimited working rights.

Required skills

• Okta governance and configuration review
• SAML 2.0, OAuth 2.0, OIDC, SCIM
• FIDO2/WebAuthn MFA, FIDO2/WebAuthn
• AWS, Azure, GCP