Principal Identity Engineer

Lead or Principal Engineer, SailPoint (NV1)

Permanent, full time

Remote, Australia East Coast

$180,000 to $215,000 + superannuation (DOE)

About the opportunity:

A leading Australian cloud and security consultancy is growing its identity practice and needs a SailPoint specialist to join the team. Your first engagement is building out a SailPoint environment for a federal government client. You'll work alongside an experienced principal on the project, so this suits a strong Lead ready to step up as much as an established Principal. After this project there's a pipeline of identity work across the wider client base, giving you variety and room to grow.

What you'll be doing:

• Designing, building and configuring a SailPoint identity governance environment for a government client
• Turning high level designs into detailed technical designs, then delivering them hands on
• Setting up joiner, mover and leaver lifecycle processes, provisioning and deprovisioning, and access certification campaigns
• Onboarding applications and configuring connectors across directories, HR platforms, cloud services and custom systems
• Running workshops and design sessions with client stakeholders (Principal level) or supporting them with guidance from senior leaders (Lead level)
• Producing clear technical documentation, runbooks and handover material
• Sharing knowledge with the wider identity team and helping grow the SailPoint capability

What we need to see:

• Current NV1 clearance (Baseline or recently lapsed NV1 may be considered)
• Solid hands on SailPoint experience, IdentityIQ or Identity Security Cloud
• Strong grounding in identity governance: role and entitlement management, access reviews, segregation of duties and least privilege
• Experience integrating SailPoint with Active Directory, Entra ID, HR systems and enterprise applications
• The ability to own technical delivery from design through to implementation
• Clear communication and confidence working directly with clients

Bonus points:

• Consulting or professional services background
• Exposure to other identity platforms such as Okta, Ping, ForgeRock or Auth0
• PAM experience with CyberArk or BeyondTrust
• Java, BeanShell, SQL or API integration skills
• SailPoint, identity or cloud certifications
• Experience in government or other regulated environments