Senior Security Principal – Identity Security

About the role

KBR is seeking a Senior Security Principal – Identity Security to join its global cyber security team. This senior technical authority will shape the company’s identity security strategy, establish standards, and lead the design and implementation of secure identity solutions across highly regulated enterprise environments.

Key responsibilities

• Define and drive enterprise identity security strategy, technical standards, reference architectures and multi‑year roadmaps.
• Lead design, implementation and optimisation of Microsoft Entra ID, Active Directory, hybrid identity and authentication services.
• Strengthen IAM capabilities including Conditional Access, MFA, passwordless, Privileged Identity Management, RBAC and least‑privilege access.
• Establish identity governance, lifecycle management and privileged access controls.
• Provide architectural oversight for application identity, federation, SSO, workload identities, service accounts and certificate services.
• Partner with cyber security, cloud, infrastructure and application teams to deliver secure identity solutions supporting enterprise transformation.
• Lead identity initiatives such as tenant migrations, cloud transformation, M&A and major technology projects.
• Improve identity threat detection, monitoring, incident response and automation using Microsoft security technologies and scripting tools.

Required profile

• 10+ years experience in identity and access management, security engineering or security architecture.
• Proven experience designing and supporting enterprise IAM solutions in large, complex environments.
• Strong expertise in Microsoft Entra ID, Active Directory and hybrid identity.
• Experience with identity governance, privileged access management, Conditional Access and modern authentication.
• Hands‑on experience with automation/scripting (PowerShell, Microsoft Graph, KQL, Logic Apps, Terraform).
• Active NV1 Defence Security Clearance (or higher) and ability to maintain it.

Required skills

• Microsoft Entra ID, Azure AD, Active Directory
• Hybrid identity, authentication, Conditional Access, MFA, passwordless, PIM, RBAC
• Identity governance, privileged access management (PAM)
• SAML, OAuth, OpenID Connect, FIDO2, Windows Hello for Business
• PKI, certificate services
• PowerShell, Microsoft Graph, KQL, Logic Apps, Terraform
• Integration with Microsoft Intune, Microsoft Purview, Palo Alto Networks, Cisco ISE, Zscaler

What we offer

• Great Place to Work certified culture
• Flexible working arrangements
• Competitive salary with annual reviews
• Paid parental leave and income protection
• Corporate rewards, salary packaging/Novated leasing
• Employee stock purchase plans
• Health benefits including flu shots, skin checks and discounted private health insurance
• Career development through online learning, mentorship and clear pathways