Principal Identity Architect

Let’s create a more sociable future together At Endeavour, we’re totally into what we do. With a portfolio that includes Dan Murphy’s, BWS, ALH Hotels, Pinnacle Drinks and more, we love to bring people together. Together we share our passion for our products and industry; it’s what inspires us to dream big, and continue to create new experiences for our customers and teams across Australia. If you thrive on positive energy, we want to meet you! Bring your passion and feel the energy Hybrid ways of working - 3 days work from office Location - Sydney or Melbourne The Principal Identity Architect plays a critical role in designing, implementing, and maintaining identity and access management (IAM) solutions within an organisation. This role encompasses a broad range of responsibilities, from leading the Identity Architecture, understanding business requirements to architecting secure and scalable identity solutions. The Principal Identity Architect collaborates with various stakeholders across the organization to ensure that IAM solutions meet both current and future needs while adhering to industry standards and best practices. Sound good? Read on. Here is a taster of what you can expect in this role: Architect IAM Solutions: Design and architect identity and access management solutions based on business requirements, security standards, and industry best practices and provide consulting to all parts of the organisation related to Identity and access management. Identity Lifecycle Management: Develop strategies and processes for managing the entire identity lifecycle, including provisioning, deprovisioning, and access governance. Access Control Policies: Define access control policies and mechanisms to enforce least privilege access principles and ensure data confidentiality, integrity, and availability. Integration and Interoperability: Integrate IAM solutions with existing systems, applications, and directories while ensuring interoperability and seamless user experience. Security Compliance: Ensure IAM solutions comply with relevant security standards, regulations, and compliance requirements such as NIST etc. Identity Federation: Implement identity federation and single sign-on (SSO) solutions to enable seamless access to multiple applications and services at scale. Authentication and Authorization Mechanisms: Design authentication and authorization mechanisms, including multi-factor authentication (MFA), role-based access control (RBAC), and attribute-based access control (ABAC). Privileged Access Management: Design onboarding patterns for PAM solution and own the PAM delivery roadmap from Architecture perspective including application integration, Privileged asset discovery and Tier-0/1 account onboarding.. Risk Management: Assess risks related to identity and access management and implement mitigating controls to address identified risks effectively. Identity Governance standards and patterns: Establish and own identity governance frameworks and policies to ensure proper oversight and enforcement of identities, access rights, and compliance. IAM Platform Evaluation: Research, evaluate, and recommend IAM products, technologies, and solutions that align with organizational needs and objectives. Documentation and Training: Create documentation, guidelines, and training materials for IAM processes, procedures, and best practices. Deliver the long-term IAM strategy and roadmap, aligning IAM goals with business objectives and the overall security strategy. Provide expert-level guidance in IAM-related security incidents, helping to troubleshoot and resolve critical IAM issues when required. Now let’s talk about you: Bachelor's or Master’s degree in Computer Science, Information Technology, or a related field. Proven experience (5+ years) in architecting and implementing identity and access management solutions. In-depth knowledge of IAM concepts, principles, and best practices. Experience with one or multiple cloud identity/PAM solutions (e.g., SailPoint IdentityNow, EntraID/Azure AD, CyberArk) is highly desirable. Hands-on experience with IAM technologies such as identity providers, directory services, authentication protocols (e.g., OAuth, SAML), Privileged access management solutions and access management systems. Strong understanding of security frameworks, compliance requirements, and regulatory standards. Experience in strategic IAM roadmap development, including aligning IAM goals with broader business and security objectives. Excellent communication and collaboration skills to work effectively with cross-functional teams and stakeholders. Ability to translate business requirements into technical IAM solutions, ensuring scalability, security, and efficiency. The benefits are good too! An exclusive discount card for our ALH Hotels pubs & accommodation, BWS, Dan Murphy’s and other Endeavour Group brands. Through our partnership with Woolworths, you'll also enjoy discounts at Woolies supermarkets and BIG W As a valued member of the team, your health and wellbeing is our top priority. You will have access to a range of free services to help you live well and support your physical, mental and financial wellbeing Endeavour Group is full of opportunities - use our dedicated learning and development options to grow an idea, yourself, and your career. This is just the start, so dream big Find out more about our range of benefits and discounts here At Endeavour, we value being a workplace where everyone’s welcome - if you meet a number of the requirements (and not all), we encourage you to apply. We are together creators With a portfolio that includes Dan Murphy’s, BWS, ALH Hotels, Pinnacle Drinks and more, Endeavour Group is big on sociability. Together we create the moments that bring millions of people together. And together we have more fun, create more opportunities, and score a lot more goals. We’re serious about creating a safe, inclusive and fun place to rock up to where equal opportunity is key, and flexibility is part of how we roll. We’re all about creating a more sociable future - for our customers and each other. If this job excites you - and you’re close-enough on the requirements, reach out, we’d love to hear from you. You can learn more about working with us on LinkedIn or at endeavourgroupcareers.com.au . Our Talent Team and Hiring Leaders kindly request no unsolicited resumes or approaches from Recruitment Agencies. Endeavour Group is not responsible for any fees related to unsolicited resumes. #WeAreTogetherCreators #ComeAsYouAre #DreamBig #FeelTheEnergy #LeaveYourMark #EndeavourGroup