Microsoft Identity Consultant

About the role

Avanade, part of Accenture, is looking for an experienced Digital Identity Specialist to join its security practice in Melbourne. This client-facing consulting role works on projects that transform client solutions around Microsoft Digital Identity capabilities and other leading vendors such as Saviynt and One Identity, serving medium to large global enterprise clients.

Key responsibilities

• Design enterprise identity and access management solutions using Entra ID, with a focus on security and efficiency.
• Develop identity architecture roadmaps to modernise access control systems in line with business growth and security needs.
• Use Entra ID to build control policies and authorisation frameworks based on least privilege and zero trust.
• Take part in client workshops and discovery sessions, turning business, technical and compliance needs into value-driven architectures.
• Design and deploy advanced authentication solutions using OAuth2.0, SAML and OIDC.
• Build IAM solutions using Entra External ID and create target-state architectures, roadmaps and designs.
• Collaborate with team members and stakeholders, work in agile teams and contribute to backlog items.

Required profile

• Proven experience in IAM with a strong focus on Microsoft Entra ID (Azure AD).
• Consulting and advisory experience with clients and other consulting firms.
• Experience leading small to medium solution design and delivery projects.
• Understanding of the business, privacy, security and compliance challenges of digital identity.
• Experience with privileged access management and secrets management.
• Australian citizenship required, and eligibility for security clearance; existing clearance preferred but not mandatory.

Required skills

• Active Directory, Entra ID, Entra ID Domain Services and Entra ID Sync.
• Modern authentication protocols: OAuth2.0, SAML, OIDC.
• Conditional access, multi-factor authentication and identity governance.
• Entra Application Provisioning and SCIM.
• PowerShell and Azure tools; automation and scripting (Python, PowerShell or similar is a plus).
• Nice to have: Auth0, Ping Identity or ForgeRock, and CIAM implementation experience.