Identity & Access Management Engineer

About the role

In this role, you'll become the City's subject matter expert for Identity and Access Management as the capability transitions into operations. You'll take ownership of Identity Lifecycle Management, Privileged Access Management (PAM), and Identity Governance and Administration (IGA), driving their ongoing evolution and maturity.

Working closely with product and platform teams, you'll lead the automation and optimisation of access controls, embedding least-privilege principles and strengthening governance to reduce identity-related risk while enabling secure and seamless access across the organisation.

Key responsibilities include

Leading the development of the business case for the City's IAM capability and supporting procurement activities through to successful vendor selection. Establishing the policies, standards and role-based access framework that underpin secure access management, ensuring least-privilege and need-to-know principles are embedded across the organisation.

Delivering secure and seamless access experiences for community-facing services through customer identity and access management solutions, including registration, authentication and self-service account management. Designing and implementing end-to-end identity lifecycle processes, leveraging automation to streamline user provisioning, access changes and deprovisioning.

Driving access governance practices, including access requests, approvals, certifications, reviews and remediation activities, to ensure access remains appropriate and compliant. Owning and evolving the City's Privileged Access Management (PAM) capability, strengthening controls and aligning practices with recognised security standards.

Expanding identity governance to cover non-human identities, including service accounts, automated workloads and emerging AI-enabled solutions. Collaborating with system integrators and delivery partners throughout design, build and testing phases to ensure solutions meet business and security requirements. Acting as the City's trusted IAM subject matter expert, providing guidance and mentoring to product, platform and operational teams on authentication, federation and secure access design.

About you

To be successful in this role, you will have a tertiary qualification in Cyber Security, Computer Science, or related field, or extensive experience in a senior Identity and Access Management engineering role. Essential Experience: Demonstrated experience designing and implementing enterprise identity and access management capability, including identity lifecycle, access governance and privileged access.

Relevant experience in a senior identity engineering role. Proven experience implementing and enhancing enterprise Identity and Access Management (IAM) solutions that strengthen security and enable seamless access across complex environments. Strong understanding of cyber security operations and defensive security practices, including threat monitoring, incident response, threat detection and vulnerability management.

Experience developing and optimising security detections, automation, and response workflows to improve operational efficiency and accelerate incident resolution. Solid knowledge of network security principles and controls, including network segmentation, intrusion detection and prevention, and secure configuration practices.

Advanced analytical and problem-solving skills, with the ability to investigate complex security challenges, interpret data from multiple sources, and provide clear, risk-based recommendations. Demonstrated experience conducting vulnerability assessments, managing remediation programs, and leveraging threat intelligence to strengthen organisational resilience.

Sound knowledge of identity and access management standards and frameworks, including NIST SP 800-63 Digital Identity Guidelines, VPDSS, and the Essential Eight. Exceptional stakeholder engagement and communication skills, with the ability to translate technical concepts, risks and solutions into clear, actionable insights for both technical and non-technical audiences.

Preferred candidates will be required to undergo a National Police Check and a Working with Children’s Check as part of the recruitment process (funded by the City). If this sounds like the role for you, then click apply now! A career with us We’d love for you to continue your career with the City and set the benchmark for a sustainable, inclusive and culturally safe workplace.

With a range of benefits, flexible working options, learning and development opportunities, support services and the opportunity to give back to the community, the City has so much to offer! Click https://www.geelongaustralia.com.au/employment/article/item/8d1155a0d84344d.aspx to view all the benefits to you working at the City.

We support accessibility and encourage discussions about any adjustments or support you may need during the recruitment process. Applications and Enquiries Click the Position Description link to view more information about this position. Enquiries: Nick Veljanoski | IT Security, Risk and Compliance Manager Nick.Veljanoski@geelongcity.

vic.gov.au Click the Apply button to submit your application or find out more about this opportunity. If we can assist you with any reasonable adjustments in order to submit your application for this role, please contact the Talent Acquisition team via email at [email protected] noting your preferred method of communication and contact details and a member of the team will be in touch.

We collect demographic data to help us learn who our advertisements are reaching and how we can reach an even more diverse audience. We are committed to building a more diverse team. Your responses to our demographic questions are strictly confidential and will not be individually shared.