IAM Engineer
- Hiring from
- Australia
- Work type
- Hybrid
- Posted
623,035 remote jobs, straight from company career pages
100% free · New jobs every minute
Show job descriptionHide job description
- A great opportunity to work with one of Australia’s largest general insurers
- Open to Sydney, Melbourne and Brisbane candidates
- Hands on IAM role to create an immediate impact with 12 Month Max Term opportunity
About Hollard
Hollard Insurance is part of the Hollard Group of Companies and one of Australia’s largest general insurers Australia and New Zealand. We underwrite a broad range of general insurance products, including motor, home, contents, business, bicycle and pet, in proud partnership with some of Australia's biggest consumer brands and broker businesses. As an independent and privately owned company, we believe we can go further together – for our people, customers, communities and partners – through an innovative approach to providing insurance.
Our state-of-the-art facilities in North Sydney reflect our commitment to providing innovative workspaces that support hybrid and remote work.
Your Team
You will join the Identity & Access Management team within Cyber Security Operations, reporting to the Team Lead – Security Engineering.
We are an APRA-regulated insurer operating a hybrid Microsoft environment across Microsoft 365, Azure, Entra ID, Intune, Group Policy and on-premises Active Directory. Beyond Microsoft, our core IAM toolset includes SailPoint (identity governance), BeyondTrust (privileged access management), BloodHound (AD/Entra attack-path analysis), Microsoft Defender for Identity, and Silverfort (identity threat protection and legacy protocol enforcement). Identity and access controls in this environment must meet APRA CPS 234 expectation
Your Role
As a IAM Engineer, you own and mature identity and access management controls across our hybrid Microsoft environment. You will be a technical authority for Microsoft Entra ID, Conditional Access, Privileged Identity Management (PIM), and Just-In-Time / Just-Enough-Access (JIT/JEA), operating within an identity-first Zero Trust strategy.
This is a hands-on engineering role within the Identity & Access Management team, supporting IAM end to end – from Microsoft identity through to identity governance and privileged access management. You will work closely with your IAM colleagues, as well as infrastructure, security operations and architecture, to reduce standing privilege and minimise our identity attack surface
Your duties and responsibilities
- Design, implement and continuously tune Conditional Access policies that enforce identity-first Zero Trust principles across users, devices, applications and workloads.
- Own Microsoft Entra Privileged Identity Management (PIM) – role design, activation policies, approval workflows and access reviews for Just-In-Time privileged access.
- Administer hybrid identity infrastructure, including Active Directory Domain Services, Entra Connect / Cloud Sync, hybrid device join, and Group Policy.
- Partner with IAM SailPoint and BeyondTrust SMEs to deliver identity lifecycle, entitlement modelling, access certification and PAM controls across Microsoft and on-premises systems, supporting least-standing-privilege outcomes.
- Support internal and external audits, including APRA CPS 234, with evidence of control design and operating effectiveness.
About You
- Deep, hands-on expertise, including Conditional Access, Privileged Identity Management (PIM), Identity Protection and Entra Connect / hybrid identity.
- Practical experience designing and implementing Just-In-Time and Just-Enough-Access models.
- Solid understanding of identity-first Zero Trust architecture and least-privilege and least-standing-privilege principles.
- Experience with joiner/mover/leaver processes, provisioning and de-provisioning, and entitlement/access reviews.
- Standout stakeholder management skills, with the ability to understand other technology teams ways of working
- Experience with SailPoint (Identity Security Cloud / IdentityNow or IdentityIQ) for identity governance and lifecycle, and BeyondTrust (Password Safe / Privileged Remote Access) or similar PAM platforms is preferred
Working at Hollard
At Hollard, you'll discover an environment where you can truly make an impact. We offer the best of both worlds – the opportunity, agility and creativity of a company growing with scale, alongside a focus on becoming a catalyst for enduring, positive, social change.
We're a tight-knit team, where authentic voices and unique perspectives matter. We work supportively, collaboratively and inclusively to help shape our future and create shared value for our communities.
Hollard proudly promotes flexible work including remote work, non-traditional work patterns, and work-family balance. We're also unapologetically committed to creating a workplace that values your diversity with a true sense of inclusion. We actively seek to hire for your different lived experiences, including as it relates to disability, ethnicity, faith, Aboriginal and Torres Strait Islander Peoples, gender diversity, sexual orientation, age, neurodiversity.
We're building something special. Working closely with our industry partners to reshape insurance for the better, we're people changing insurance.
Please note: Even if you don't meet all our selection criteria, we encourage you to apply.
A full background check will be completed on the successful applicant.
Australian work rights are required for this position.
Visit the Hollard careers page to learn about how Hollard will collect, store and handle your personal information.
We are NOT engaging Recruitment Agencies for this role and ask agencies to respect our policy of no unsolicited contact regarding advertised vacancies.
