Identity & Zero Trust Engineer (Canberra)

Profectus is seeking Expressions of Interest from Identity and Zero Trust Engineers to support anticipated opportunities across multiple Australian Government departments and the broader national security community. These roles are expected to contribute to the design, build, and uplift of identity, access, and Zero Trust capabilities across secure enterprise systems. Opportunities are most likely to be Canberra-based, with potential requirements emerging across other locations nationally. Key Responsibilities
- Design, build, and operate identity, access, and Zero Trust capabilities for Australian Government clients
- Implement and uplift Microsoft Entra ID (Azure AD), conditional access, identity protection, and privileged access management
- Engineer privileged access (PAM) solutions and just-in-time / just-enough access patterns for sensitive systems
- Support federation, single sign-on, and credential lifecycle management across enterprise and mission environments
- Contribute to Zero Trust Architecture (ZTA) reference designs aligned to NIST SP 800-207 and Commonwealth guidance
- Implement strong authentication (FIDO2, smartcard, PIV-style) appropriate to secure government environments
- Work with cyber, platform, and application teams to embed identity controls into government services
- Document designs, runbooks, and operational procedures suitable for accreditation Required Experience
- Demonstrated experience designing and delivering enterprise identity and access solutions
- Hands‑on experience with Microsoft Entra ID / Azure AD, conditional access, and modern authentication
- Experience implementing or operating privileged access management tooling (e.g. CyberArk, BeyondTrust, Delinea)
- Working knowledge of Zero Trust principles and reference architectures
- Experience working within Australian Government or other regulated environments
- Robust documentation and stakeholder engagement skills
- Prior experience delivering identity capability within classified Australian Government environments
- Experience with Active Directory hardening, tiered admin models, and ESAE / Red Forest patterns
- Familiarity with SailPoint, Saviynt, Okta, or Ping for IGA and federation
- Exposure to non‑person entity (NPE) identity, machine identity, and secrets management
- Working knowledge of the ISM, Essential Eight (with focus on Restrict Admin Privileges & MFA), and PSPF
- Experience designing for cross‑domain and multi‑classification access scenarios Certifications (Highly Regarded)
- Microsoft certifications (SC‑300 Identity and Access Administrator, AZ‑500, SC‑100)
- CyberArk Defender / Sentry, BeyondTrust, or Delinea certifications
- SailPoint, Saviynt, Okta, or Ping certifications
- Certified Information Systems Security Professional (CISSP)
- CompTIA Security+ or equivalent Security Requirements
- Must be an Australian Citizen
- Must have the ability to obtain a Negative Vetting Level 1 (NV1) clearance Working Arrangements
- Predominantly Canberra‑based roles within secure Australian Government environments
- Onsite work is expected for most opportunities, including engagement on classified networks Why Profectus Profectus partners with the Australian Government to deliver trusted capability across complex and classified environments. We take a long‑term, relationship‑driven approach
- supporting our people across the full lifecycle of their engagement while contributing to outcomes of national importance. We are focused on building a strong network of cleared professionals to support upcoming demand across the Commonwealth and the broader national security community, and encourage Expressions of Interest from individuals seeking meaningful, impactful work in the national security domain. #J-18808-Ljbffr Apply on Kit Job: kitjobau.com/job/3rslyu