Job Description

We’re looking for a Senior IAM Engineer to lead the design and delivery of AFCA’s next-generation Identity and Access Management (IAM) capability.

This is a key role supporting a major transformation program, where you’ll help replace legacy identity solutions and establish a modern, scalable CIAM and workforce identity platform.

You’ll take ownership of end-to-end IAM solution design and implementation, ensuring identity is secure, seamless and enables robust customer and workforce experiences across our digital ecosystem.

In this role you will:

- Lead and own the end-to-end design and implementation of enterprise IAM solutions across transformation programs, covering both CIAM (external users) and workforce identity.
- Drive evaluation and selection of IAM platforms (e.g. evolution of Azure B2C / Microsoft Entra External ID or alternatives), including defining target-state architecture and transition roadmap, vendor engagement and supporting commercial considerations.




- Translate enterprise and solution architecture into practical, secure, and scalable IAM designs that can be delivered by engineering teams, incorporating automation, Infrastructure as Code (IaC), and CI/CD practices where appropriate.
- Provide hands-on engineering leadership across the IAM lifecycle (design, build, integration, and run), including complex troubleshooting and decision-making
- Design and implement integrations across AFCA’s application ecosystem (e.g. Dynamics 365, ServiceNow, APIs, portals), including:
- OIDC / OAuth2 authentication flows
- Token design and validation
- API and service-to-service authentication patterns

- Implement identity lifecycle management, RBAC models and least privilege access
- Design and strengthen identity security controls (MFA, conditional access, modern authentication)
- Identify and mitigate identity-related security risks, including fraud and account takeover threats

📌 Senior IAM Engineer (Melbourne)
🏢 AFCA
📍 Melbourne