Designs and implements identity and access security solutions across Active Directory, Azure environments, Certificate Services, and privileged access platforms. The role addresses privilege escalation and lateral movement risks, establishes role-based access controls and administrative boundaries, leads remediation projects, and aligns security practices with regulatory requirements and industry frameworks. It also involves stakeholder management, technical documentation, vendor collaboration, and communicating security concepts to technical and non-technical audiences.
We're looking for an experienced Identity Architect to work on a client project in the financial services industry.
The purpose of this role is to serve as an Identity Architect with a strong focus on Active Directory, Windows Server, and Privileged Access Management. You will spearhead the design and implementation of strong Role Based Access Controls, privilege escalation prevention and administrative boundaries across Certificate Services, Azure IaaS, and multiple Directory Services instances. Initial 6-month contract with potential to renew.
Key Responsibilities
- Project Delivery and Security Improvement
- Identify and consolidate new and known risks related to privilege escalation or lateral movement across all client AD, AAD, Azure IaaS and relevant systems administration practices.
- Drive the solution design, key stakeholder management, deliver, implementation, and documentation of priority risk remediation activities.
- Align processes and security baselines with industry security best practises and frameworks such as CIS, ISM and MS RAMP.
- Understanding of regulatory requirements for financial institutions such as APRA, ASIC, Monetary Authority of Singapore (MAS), Privacy and GDPR.
- Excellent working knowledge of the Mitre Attack framework
- Knowledge of security standards and frameworks such as ISO 27000 and CIS benchmarks.
- Must be a critical thinker, with strong problem-solving skills.
- High degree of initiative and ability to work with little supervision.
- High level of personal integrity
Interacts with Key Stakeholders:
- Identity Lead
- Technology organisation
- Security and Risk Team
- Technology solution and Enterprise Architects
- Project Teams
- System owners
- Third-party solution vendors
- Support vendor technical specialists
Experience Requirements:
- Minimum of ten years of experience in IT roles with a minimum three years’ experience in a similar security risk remediation role.
- Experience in securing Windows environments, Active Directory, Azure Active Directory and Azure IaaS Cloud environments.
- Good knowledge of PIM and PAM technologies including Microsoft PIM and Delinea Secret Server
- Experience in working in a multi-vendor environment would be advantageous.
- Excellent written and verbal communication skills, interpersonal and consultative skills, and the ability to communicate concepts to technical and non-technical audiences.
- Exhibit excellent analytical skills, the ability to manage multiple project components under strict timelines, as well as the ability to work well in a demanding, dynamic environment
General Compliance:
- Ensure a safe working environment in accordance with the relevant Work Health and Safety (WHS) legislation
- Work within and actively promote the core vision, corporate strategies, values, policies, procedures and Code of Conduct
- Ensure a thorough understanding of and adherence to any corporate or government compliance requirements
- Ensure adherence to Starboard IT Information Security policies, procedures, standards and proactively report
- Continued employment is subject to the successful completion of AFP Police clearance check
- Located in Sydney/Melbourne CBD
- Australian citizen, permanent resident and hold a valid working rights visa.
Benefits:
- Competitive salary
- Initial 6-month engagement with the potential to renew an additional 6 months
- Flexible hybrid working environment (WFH & Onsite)
Similar Jobs
Artificial Intelligence • Cloud • Infrastructure as a Service (IaaS) • Renewable Energy
Own the network security architecture for data center fabrics, WAN, backbone, internet, peering, and facilities networks. Define segmentation, zero-trust, tenant isolation, routing security, edge protection, device hardening, and security-as-code standards. Build automation prototypes, secure AI and HPC environments, evaluate security vendors, model threats, support audits, and review major network changes. Mentor engineers and communicate security risks and trade-offs to technical and executive stakeholders.
Top Skills:
AristaBase Command ManagerBgpCi/CdCiscoDdos ProtectionEvpnFirewallsGoIec 62443Is-IsIso 27001JuniperMplsNistNvidia DgxNvidia SpectrumOspfPolicy-As-CodePythonRpkiRun:AiSdnSoc 2VxlanZero-Trust Access
Transportation • Defense • Utilities • Industrial
Designs and governs secure technology solutions across applications, cloud, platforms, infrastructure, and data. Reviews architecture and solution designs, identifies security risks, defines reusable security patterns and guardrails, translates threats into practical controls, and advises on risk decisions and remediation. The role collaborates with architecture, engineering, governance, risk, and business teams while promoting secure-by-design practices, coaching delivery teams, and communicating technical risks to varied stakeholders.
Top Skills:
Application SecurityAsd Essential EightCloud SecurityDevOpsEndpoint SecurityIdentity SecurityInfrastructure SecurityIso/Iec 27001Nist
Edtech
Lead enterprise security architecture across cyber uplift, identity and access management, cloud transformation, and technology programs. Establish security principles, design secure and resilient enterprise solutions, conduct architecture reviews, and influence technology decisions. The role requires collaboration with senior leaders, architects, and technology teams, translating complex security concepts into business outcomes while supporting governance, Zero Trust, IAM, cloud security, application, API, data, monitoring, and vulnerability-management initiatives.
Top Skills:
APIsAzureCloud SecurityData PlatformsEdr/XdrEnterprise ApplicationsEntra IdEssential EightIdentity And Access Management (Iam)Iso 27001Microsoft 365NistPrivileged Access Management (Pam)Security MonitoringSIEMVulnerability ManagementZero Trust
What you need to know about the Sydney Tech Scene
From opera to comedy shows, the Sydney Opera House hosts more than 1,600 performances a year, yet its entertainment sector isn't the only one taking center stage. The city's tech sector has earned a reputation as one of the fastest-growing in the region. More specifically, its IT sector stands out as the country's third-largest, growing at twice the rate of overall employment in the past decade as businesses continue to digitize their operations to stay competitive.



