Principal Engineer - Identity Access Management

About the role

The Principal Engineer - Identity & Access Management (IAM) designs, implements, administers and continuously improves APRA's enterprise identity platforms and access management services. The role covers workforce, privileged and non-human identities (including application, service and AI agent identities) across on-premises and cloud environments, and advises senior stakeholders on IAM matters. It reports to the Infrastructure Manager within the Technology division and sits in the Core Infrastructure team.

Key responsibilities

• Design, implement and support enterprise IAM services across Active Directory, Microsoft Entra ID, Microsoft 365 and Azure.
• Manage identity lifecycle services and automation, supporting Joiner, Mover and Leaver (JML) processes.
• Deliver and maintain modern authentication, including SSO, MFA, Conditional Access and passwordless authentication.
• Administer identity governance controls, access reviews, role-based access controls and access certification.
• Manage privileged access management solutions, including CyberArk and Microsoft PIM.
• Support and govern workforce, privileged and non-human identities, and integrate business applications with authentication and authorisation services.
• Drive automation and continuous improvement, provide Level 3 support and contribute to technology projects and security initiatives.

Required profile

• Australian citizenship and ability to gain a security clearance.
• Extensive experience managing enterprise IAM environments.
• Experience with identity governance, access reviews, RBAC and identity lifecycle processes.
• Proven experience administering privileged access management solutions, ideally CyberArk and Microsoft PIM.
• Strong problem-solving and troubleshooting skills in complex enterprise environments.

Required skills

• Active Directory, Microsoft Entra ID, Microsoft 365 and hybrid identity environments.
• PowerShell scripting and automation.
• Zero Trust principles, least privilege and privileged access controls.
• Knowledge of ACSC Essential Eight, ISM and PSPF.