Senior IAM Engineer

Help shape AFCA’s next-generation identity capability.

You will lead the design and delivery of modern customer and workforce identity solutions, replacing legacy platforms and improving secure access across AFCA’s digital ecosystem.

This is a hands-on senior role with genuine ownership, direct influence on technical decisions and the opportunity to grow your impact as the IAM capability matures.

What you will do:

• Own IAM solution design and implementation across CIAM and workforce identity. • Define target-state architecture, migration pathways and transition roadmaps. • Deliver solutions using platforms such as Microsoft Entra ID, Entra External ID, Okta and Auth0. • Design secure integrations for applications, APIs and digital channels using OAuth 2.0, OIDC and SAML. • Implement identity lifecycle management, access governance, RBAC and least privilege. • Strengthen controls including MFA, conditional access and modern authentication. • Provide hands-on technical leadership and guide delivery teams through complex decisions.

What you will bring:

• Strong experience delivering enterprise WIAM or CIAM solutions. • Hands-on expertise with modern identity platforms and authentication protocols. • Experience designing application, API and service authentication patterns. • The ability to translate architecture into practical, scalable solutions. • Strong technical leadership, stakeholder engagement and problem-solving skills. • Experience migrating from Azure AD B2C, legacy federation, directory or access-management platforms. • Experience operating split identity models for external customers and internal workforce users. • Experience with Microsoft Entra ID Governance, entitlement management, access packages, lifecycle workflows, SCIM provisioning or equivalent capabilities. • Experience with identity automation, infrastructure as code, CI/CD and automated integration testing. • Experience delivering identity solutions in regulated, high-trust or information-sensitive environments. • Relevant identity, cloud or security certifications, such as Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Cybersecurity Architect Expert, Okta Certified Professional, Okta Certified Administrator, Auth0 certification, CIAM, CISSP, CCSP or equivalent • Silver AWEI Accreditation 2025 – Recognised for LGBTQ+ workplace inclusion. • Accredited Family Friendly Workplace – Supporting work-life balance and inclusivity. • Hybrid working – Flexible arrangements with two days a week in our modern offices designed for collaboration and wellbeing. • Additional and inclusive leave options – Flexible public holidays, gender affirmation leave, women’s health leave, and bonus paid time off over the end of year holiday period.