identity engineer.

• Identity Platform Modernisation: Define technical specifications to connect information systems to the identity platform as cloud migration progresses, ensuring reliable and secure operations across the hybrid estate.
• Access Control Enforcement: Design and implement privileged access controls, manage Separation of Duties (SoD) to address toxic entitlement combinations, and deploy RBAC/ABAC models aligned with a least-privilege methodology.
• Cloud Integration: Direct Identity and Solution Architects to identify and resolve identity control gaps that emerge as workloads shift between on-premises and cloud environments.
• Authentication Standards: Implement Single Sign-On (SSO), multi-factor authentication (MFA) protocols, and federation models between enterprise applications and primary identity providers.
• Governance Frameworks: Drive the implementation of SailPoint to govern access across the estate, while ensuring clear operational documentation is maintained.

• IAM Specialisation: Extensive engineering experience in Identity and Access Management, with a proven history of delivering technical solutions in hybrid environments rather than advisory-only capacities.
• Microsoft Stack Expertise: Advanced technical knowledge of Microsoft identity platforms, including Entra ID (Azure AD), Active Directory, Conditional Access policies, and Azure RBAC.
• Security Control Application: Practical experience implementing privileged access controls, resolving toxic access combinations, and managing directory services during active cloud migrations.
• Federation Protocols: Solid understanding of modern identity protocols, directory structures, and system integration methods.
• Strategic Communication: Exceptional communication skills with a demonstrated capability to direct technical specialists, risk teams, and architecture business partners effectively.

• Familiarity with Customer Identity (CIAM) platforms such as Optimal, Okta, or Azure AD B2C.
• Exposure to Privileged Access Management (PAM) or Identity Governance and Administration (IGA) solutions like SailPoint.

If you are an experienced Identity Engineer looking to apply your technical expertise to a large-scale cloud transformation in Auckland, please apply now.

For a discussion regarding the environment and delivery expectations, please contact Amaan Kazmi at amaan.kazmi@randstaddigital.co.nz or call 022 060 7986.

At Randstad, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.