Identity Engineer

About the role

Auckland Council is seeking an experienced Identity Engineer to join its Information Security team on a 12‑month fixed‑term contract. You will design, implement and support modern identity and access management solutions across both cloud and hybrid environments, helping protect services used by thousands of Aucklanders.

Key responsibilities

• Design, implement and enhance IAM capabilities across cloud and on‑premise platforms.
• Deploy Identity Governance, Privileged Access Management (PAM), RBAC, ABAC and least‑privilege controls.
• Deliver Single Sign‑On (SSO), Multi‑Factor Authentication (MFA) and identity federation solutions.
• Collaborate with Architecture, Platform Engineering and Application teams to integrate identity services.
• Identify and remediate identity and access gaps across systems.
• Contribute IAM expertise to cloud migration and transformation initiatives.
• Work with Security Operations to improve monitoring, governance and compliance.
• Maintain operational documentation and support the maturity of the IAM capability.

Required profile

• Strong IAM professional with end‑to‑end identity management experience.
• Proven ability to design, implement and support enterprise identity solutions.
• Excellent stakeholder engagement and collaboration skills.
• Relevant certifications (e.g., SC‑300, AZ‑104, AZ‑500, CISSP) are highly regarded.

Required skills

• Microsoft Entra ID
• Azure
• Enterprise IAM platforms
• Single Sign‑On (SSO)
• Multi‑Factor Authentication (MFA)
• Role‑Based Access Control (RBAC)
• Attribute‑Based Access Control (ABAC)
• Privileged Access Management (PAM)
• SAML
• OAuth
• OpenID Connect

What we offer

• Opportunity to work on large‑scale identity transformation for a major public sector organisation.
• Collaborative, forward‑thinking security team environment.
• Exposure to cloud migration programmes and hybrid technology landscapes.