cybersecurity systems lead.

Role Overview

Opportunity to join a leading financial services organization to lead the engineering, operational health, and continuous automation of enterprise Identity and Access Management (IAM) platforms. Operating within a highly regulated environment, this role oversees Okta and Microsoft Entra ID architectures and CyberArk privileged access management. You will bridge the gap between technical execution and Information Security strategy, driving automated Zero Trust access policies, and APRA CPS 234 / ISO 27001 audit remediation.

Key Criteria

• Authentication & Federation: 5+ years of hands-on engineering experience across Okta (as Primary IdP) and Microsoft Entra ID (Azure AD), including federated configurations, SAML 2.0, OIDC, OAuth 2.0, and WS-Federation protocols.
• Identity Governance & Administration (IGA): 3+ years of experience configuring and operating IGA solutions (SailPoint IdentityNow/IdentityIQ, Saviynt, or Okta Identity Governance) for User Access Reviews (UAR) and entitlement management.
• Privileged Access Management (PAM): Direct hands-on experience implementing and maintaining PAM controls via CyberArk, Entra PIM, or equivalent tools.
• Automation & Integration: Proven capability building identity integrations using SCIM, REST APIs, PowerShell, or workflow engines (Okta Workflows, Workato) to automate JML processes and reduce offboarding SLAs.
• Regulatory & Compliance Knowledge: Practical understanding of APRA CPS 234 and ISO 27001 standards, with demonstrated experience translating security policies into technical controls and audit evidence.
• Security & Network Concepts: Exposure to Zero Trust Architecture, Conditional Access Policies, least privilege access enforcement, and Tier-3 root-cause authentication log analysis across cloud environments.
• Industry Background: Prior experience in regulated Australian financial services (Banking preferred)
• Target Certifications (Desirable): Okta Certified Administrator/Consultant, Microsoft Certified: Identity and Access Administrator Associate (SC-300), SailPoint Certified Engineer, CyberArk Defender/Sentry, or CISSP/CISM.

Key Relationships

• Manager Enterprise Architecture, Data & Engineering (Direct Reporting Line)
• Information Security IAM Manager & Security Architecture Teams
• Enterprise Architecture, Application Support, and Digital Engineering Teams
• Internal Risk, Compliance, Internal Audit, and External Audit Stakeholders

Key Responsibilities

• Platform Ownership & Engineering: Own the technical implementation, configuration, and operational health of the enterprise identity suite, including Okta / Entra ID federation, SailPoint/Saviynt IGA, and CyberArk PAM infrastructure.
• Governance & Access Reviews: Support and maintain User Access Review (UAR) tooling and quarterly certification campaigns, ensuring rapid and auditable access revocation.
• Compliance & Security Assurance: Gather and deliver technical evidence for APRA CPS 234 and ISO 27001 compliance audits, ensuring timely remediation of all identity-related findings.
• Incident Escalation & Root Cause Analysis: Act as the Tier-3 escalation point and technical authority for identity authentication incidents, carrying out complex log analysis across Okta and Entra ID tenants.
• Zero Trust Policy Enforcement: Design, test, and deploy Conditional Access Policies, Adaptive MFA, and Entra PIM configurations in alignment with Information Security strategy.
• Metrics & Platform Health: Produce structured operational metrics and dashboards covering platform reliability, capacity, and risk indicators for leadership and security committees.

At Randstad Digital, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.

experience