Identity & Access Management Engineer in Geelong

In this role, you'll become the City's subject matter expert for Identity and Access Management as the capability transitions into operations. You'll take ownership of Identity Lifecycle Management, Privileged Access Management (PAM), and Identity Governance and Administration (IGA), driving their ongoing evolution and maturity. Working closely with product and platform teams, you'll lead the automation and optimisation of access controls, embedding least-privilege principles and strengthening governance to reduce identity-related risk while enabling secure and seamless access across the organisation.

Key responsibilities include:

• Leading the development of the business case for the City's IAM capability and supporting procurement activities through to successful vendor selection.
• Establishing the policies, standards and role-based access framework that underpin secure access management, ensuring least-privilege and need-to-know principles are embedded across the organisation.
• Delivering secure and seamless access experiences for community-facing services through customer identity and access management solutions, including registration, authentication and self-service account management.
• Designing and implementing end-to-end identity lifecycle processes, leveraging automation to streamline user provisioning, access changes and deprovisioning.
• Driving access governance practices, including access requests, approvals, certifications, reviews and remediation activities, to ensure access remains appropriate and compliant.
• Owning and evolving the City's Privileged Access Management (PAM) capability, strengthening controls and aligning practices with recognised security standards.
• Expanding identity governance to cover non-human identities, including service accounts, automated workloads and emerging AI-enabled solutions.
• Collaborating with system integrators and delivery partners throughout design, build and testing phases to ensure solutions meet business and security requirements.
• Acting as the City's trusted IAM subject matter expert, providing guidance and mentoring to product, platform and operational teams on authentication, federation and secure access design.

To be successful in this role, you will have a tertiary qualification in Cyber Security, Computer Science, or related field, or extensive experience in a senior Identity and Access Management engineering role. Demonstrated experience designing and implementing enterprise identity and access management capability, including identity lifecycle, access governance and privileged access. Relevant experience in a senior identity engineering role. Proven experience implementing and enhancing enterprise Identity and Access Management (IAM) solutions that strengthen security and enable seamless access across complex environments. Strong understanding of cyber security operations and defensive security practices, including threat monitoring, incident response, threat detection and vulnerability management. Experience developing and optimising security detections, automation, and response workflows to improve operational efficiency and accelerate incident resolution. Solid knowledge of network security principles and controls, including network segmentation, intrusion detection and prevention, and secure configuration practices. Advanced analytical and problem-solving skills, with the ability to investigate complex security challenges, interpret data from multiple sources, and provide clear, risk-based recommendations. Demonstrated experience conducting vulnerability assessments, managing remediation programs, and leveraging threat intelligence to strengthen organisational resilience. Sound knowledge of identity and access management standards and frameworks, including NIST SP 800-63 Digital Identity Guidelines, VPDSS, and the Essential Eight. Exceptional stakeholder engagement and communication skills, with the ability to translate technical concepts, risks and solutions into clear, actionable insights for both technical and non-technical audiences.

Preferred candidates will be required to undergo a National Police Check and a Working with Children’s Check as part of the recruitment process (funded by the City).

We are committed to being a child-safe organisation and have zero-tolerance for child abuse. We have specific policies, procedures, and mandatory training in place to support employees, volunteers, and contractors to achieve and adhere to these commitments.

At the City we want a workforce that reflects the community we live in. We welcome and embrace everyone, all people with their own unique experiences, and support and encourage all our employees to do their best work, have equal access to opportunities and a just working environment. For this reason, we particularly welcome and encourage applications from First Nations people, people with diverse cultural and linguistic backgrounds, from the LGBTQIA+ community, people with disability and people of all genders, ages and diverse experience.

If you’re ready to be part of something bigger, join us in shaping the future of Geelong. We support accessibility and encourage discussions about any adjustments or support you may need during the recruitment process.

Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad.