{"id":2851931,"url":"https://alion.io/job/apra-principal-engineer-identity-access-management","title":"Principal Engineer - Identity Access Management","company":{"id":1767392,"name":"APRA","domain":"apra.gov.au","url":"https://alion.io/company/apra-gov-au","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sydney, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":83000,"max_usd":215000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":679},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"Azure","optional":false},{"name":"CyberArk","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-19T04:27:40Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-23T03:26:09Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"The role\nPrincipal Engineer - Identity & Access Management (IAM) is responsible for the design, implementation, administration, maintenance and continuous improvement of APRA's enterprise identity platforms and access management services. The role supports the secure management and governance of workforce, privileged and non-human identities, including application, service and AI agent identities, across on-premises and cloud environments, while enabling secure and effective access to business services.\nThe role is responsible for delivering and supporting IAM capabilities across identity lifecycle management, authentication, access governance, privileged access and identity security controls. The position also provides technical advice to senior stakeholders on identity and access management matters and contributes to the development and improvement of IAM solutions in line with APRA's security, operational and regulatory requirements.\nThe team\nReporting to the Infrastructure Manager within the Technology division, the Principal Engineer - Identity & Access Management is a member of the Core Infrastructure team. The role works closely with the Cyber Security function, other product teams within Technology and stakeholders across APRA in the delivery and operation of enterprise identity services.\nKey responsibilities\nDesign, implement and support enterprise IAM services across Active Directory, Microsoft Entra ID, Microsoft 365 and Azure.\nManage identity lifecycle services and automation, supporting Joiner, Mover and Leaver (JML) processes.\nDeliver and maintain modern authentication capabilities, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access and passwordless authentication.\nAdminister identity governance controls, access reviews, role-based access controls and access certification processes.\nManage privileged access management solutions including CyberArk and Microsoft Privileged Identity Management (PIM).\nSupport and govern workforce, privileged and non-human identities, including service accounts, application identities and emerging AI agent identities.\nIntegrate business applications with enterprise authentication and authorisation services.\nDrive automation and continuous improvement across identity provisioning, access management and operational processes.\nProvide expert Level 3 support and technical leadership for complex identity and access issues.\nContribute to technology projects, security initiatives and platform uplift programs that strengthen APRA's technology environment.\nTo work with us you will need to be an Australian Citizen and be able to gain a security clearance.\nAbout you\nExtensive experience managing enterprise Identity and Access Management environments.\nStrong expertise across Active Directory, Microsoft Entra ID, Microsoft 365 and hybrid identity environments.\nHands-on experience with IAM technologies including SSO, MFA, Conditional Access and passwordless authentication.\nExperience managing identity governance, access reviews, RBAC and identity lifecycle processes.\nProven experience administering Privileged Access Management solutions, ideally including CyberArk and Microsoft PIM.\nStrong PowerShell scripting and automation capabilities.\nKnowledge of Zero Trust principles, least privilege access models and privileged access controls.\nExperience supporting identity services across Azure, Microsoft 365 and hybrid cloud environments.\nStrong problem-solving and troubleshooting skills within complex enterprise environments.\nAn understanding of security frameworks such as the ACSC Essential Eight, ISM and PSPF.","description_format":"text","description_chars":3635,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Central Banks & Financial Regulators"],"lifecycle":[{"event":"open","at":"2026-10-19T13:34:47Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":4,"expected_fill_days":17,"reasons":["conf:2","win:early"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/apra-principal-engineer-identity-access-management","json_url":"https://alion.io/job/apra-principal-engineer-identity-access-management.json","meta":{"generated_at":"2026-10-23T08:41:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13958,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1767392},"rest":"https://alion.io/mcp/rest/get_company?id=1767392"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fapra-principal-engineer-identity-access-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fapra-principal-engineer-identity-access-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fapra-principal-engineer-identity-access-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/apra-principal-engineer-identity-access-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fapra-principal-engineer-identity-access-management"}]}