Identity Engineer

About the Role

This 12-month contract opportunity based in Auckland CBD is centered on a large-scale identity modernisation program. The key focus initially lies in enhancing Workforce Identity and Access Management (IAM) systems.

As an Identity Engineer, you will engage hands-on with engineering tasks aimed at modernising the management of identities for approximately 10,000 users. Collaboration with Application Owners, Identity Architects, and Security teams is essential to revamp identity handling across diverse applications, especially as the organisation undertakes a cloud migration initiative.

Key Responsibilities

• Lead the engineering and modernization of workforce identity solutions utilizing Microsoft Entra ID and Azure environments.
• Facilitate the integration of enterprise applications and systems with identity platforms amidst cloud migration.
• Implement and refine Identity Governance and Administration controls to maintain robust access management.
• Strengthen privileged access frameworks and promote least-privilege access principles.
• Identify, analyze, and remediate toxic access scenarios and conflicting entitlement combinations.
• Support identity life-cycle management processes, including access certifications and role-based access control (RBAC) implementations.
• Design and deploy federation solutions, authentication protocols, Single Sign-On (SSO), and Multi-Factor Authentication (MFA) systems.
• Collaborate with Application Owners, Identity Architects, and Security teams to mitigate gaps in identity control.
• Enhance the security posture and usability of employee identity experiences.
• Develop and provide clear technical documentation and guidance throughout the course of delivery.

Required Qualifications and Experience

• Proven expertise in Workforce Identity and Access Management within complex enterprise contexts.
• Hands-on experience with Microsoft Entra ID, Azure, and Active Directory platforms.
• Proficiency in integrating applications with enterprise identity infrastructure.
• Solid knowledge of Identity Governance and Administration frameworks and technologies.
• Practical experience managing privileged access, access controls, and mitigating toxic entitlement risks.
• Thorough understanding of federation technologies, SSO, MFA, and modern authentication standards.
• Familiarity with Role-Based Access Control (RBAC), least privilege access models, and comprehensive identity life-cycle management.
• Experience managing identity services spanning hybrid cloud and on-premises environments.
• Ability to effectively collaborate with architects, security professionals, application teams, and business stakeholders.

Additional Information

This role offers a unique chance to contribute to all aspects of the identity life-cycle rather than solely administering existing systems. Candidates who enjoy addressing complex identity and access challenges with direct engineering involvement are encouraged to apply.