RFQ-ASD- LH-06309 Senior Entra ID Cloud Engineer
Due to the nature of clients we work with here at Kinexus and the projects these roles will be based on, an Australian Government NV1 clearance is essential.
These opportunities do not have the ability to obtain sponsorship for a security clearance (including applicants who currently hold a security clearance seeking to upgrade).
ABOUT THIS ROLE
Australia Signals Directorate (ASD) requires an EL1 equivalent Entra ID Cloud Engineer to provide technical leadership and authoritative advice in the design, implementation and uplift of the agency's cloud and identity services. The Agency is seeking an experienced Cloud Engineer with broad capability across Microsoft Azure and a strong, demonstrable focus on Microsoft Entra (Azure AD) and identity management.
This role has a particular emphasis on strengthening identity, authentication, and access governance across cloud and hybrid environments. The successful candidate will ensure that identity services are secure, resilient, and aligned with the Protective Security Policy Framework (PSPF), the Information Security Manual (ISM), and whole of government security expectations. The position also contributes to broader Azure platform operations, cloud governance, and transformation initiatives.
Initial contract duration: 12 months
Extension term: 12 months
Number of extensions: 2
Location of work: Perth, Brisbane, Melbourne, or Canberra.
Working arrangements: Majority of the work will be from an ASD office. The Preferred locations for this RFQ are Brisbane, Canberra, Melbourne however Interstate based candidates may be considered. Work From Home Arrangement may be considered in line with business requirements and Agency Policies.
ABOUT THE COMPANY
Australian Signals Directorate (ASD) is the federal agency responsible for foreign signals intelligence, cyber warfare and information security. ASD's purpose is to defend Australia from global threats and help advance our national interests.
JOB DUTIES AND RESPONSIBILITIES
* Lead the design, implementation, and optimisation of Microsoft Entra (Azure AD) services, including identity integration, conditional access, MFA, authentication protocols, identity protection, and privileged access management.
* Strengthen identity governance and lifecycle management, supporting RBAC, access reviews, secure onboarding of applications, and enforcement of least privilege principles.
* Contribute to the design and operation of Azure cloud services across compute, storage, monitoring, automation, and platform operations.
* Develop and enhance cloud and identity security controls, governance frameworks, and operational processes in alignment with PSPF and ISM requirements.
* Support cloud transformation initiatives, including migration of workloads, modernisation of legacy identity systems, and adoption of cloud native identity capabilities.
* Provide authoritative technical advice to senior stakeholders on identity, authentication, cloud security, and architectural considerations.
* Lead and mentor technical staff, fostering capability uplift and supporting a culture of continuous improvement.
* Prepare high quality documentation, architectural artefacts, and reports to support governance, risk management, and decision making processes.
The ideal candidate will demonstrate:
* Strong practical experience with Microsoft Entra (Azure AD), including identity integration, conditional access, authentication services, identity governance, and hybrid identity models.
* Broad experience across Microsoft Azure services, including compute, storage, monitoring, automation, and platform operations.
* Understanding of Zero Trust principles, secure identity architecture, and cloud security best practice.
* Experience working within Australian Government security frameworks (PSPF, ISM) and supporting audit, assurance, or accreditation processes.
* Ability to lead complex technical initiatives, manage competing priorities, and deliver outcomes in a high assurance environment.
* Strong communication and stakeholder engagement skills, with the ability to translate complex technical concepts for diverse audiences.
* Demonstrated analytical and problem solving skills, with the ability to provide authoritative technical advice.
The ideal candidate will hold the following certifications / qualifications:
* Certifications such as SC‑300, AZ‑500, AZ‑305, or equivalent experience.
* IRAP familiarity or experience working in PROTECTED environments is advantageous.
Technical skills
Deep Expertise in Microsoft Entra ID (Identity & Access Management), Strong Understanding of Australian Government Security Frameworks, Advanced Privileged Access Management (PAM) and PIM Capability, Azure RBAC, Zero Trust, and Conditional Access Mastery.
Desirable:
Experience with Multi Cloud or Hybrid Identity, Automation and Infrastructure as Code (IaC) Skills, Exposure to Security Operations and Threat Detection, Experience Developing IAM Governance Artefacts.
SKILLS & EXPERIENCE NEEDED
* Must be an Australian citizen with a NV1 security clearance.
* Demonstrated minimum 5 and up to 10 years hands-on experience designing, implementing, and operating Azure Active Directory (Microsoft Entra ID) in enterprise environments, including tenant configuration, identity governance, and access controls.
* Proven experience developing and maintaining automation using PowerShell and/or Azure CLI to administer Entra ID and supporting Azure services, including repeatable scripts for provisioning, configuration, and operational support.
* Demonstrated experience implementing and managing cross‑tenant identity architectures, including Entra ID B2B and/or B2C configurations, with an understanding of security, trust, and lifecycle management implications
* Demonstrated leadership experience in technical or delivery contexts, including providing direction to teams or vendors, making architectural decisions, and being accountable for outcomes, quality, and risk.
* Excellent organisational and communication skills, with the ability to plan and prioritise work, produce clear technical documentation, and communicate complex identity concepts to both technical and non technical stakeholders.
Desirable criteria
* Demonstrated experience managing complex ICT or identity‑related projects, involving multiple stakeholders, competing priorities, and high delivery risk, with clear evidence of successful outcomes.
BENEFITS
Why work for ASD?
* Work on interesting and prestigious projects vital to the ongoing defence of Australia.
* Flexible work environment; work the hours that suit you between 7am and 7pm.
* Low attrition rate: the great variety of projects and opportunities across different business areas ensure few workers leave ASD.
* Long contracts available.
* Fantastic growth opportunities available at any stage of your career.
Why Kinexus?
* Kinexus has been supplying contractors to government panels since 2004 and have a strong relationship with them.
* Our experience in managing contractors in defence/national security industries means we understand the requirements from the Commonwealth, insurances and clearances.
* DISP accredited; we can hold clearances and manage renewals.
* Dedicated account manager (me!) who is your dedicated POC and offer continuous contractor care.
* Rate negotiation guidance in line with the SFIA framework.
* Dedicated payroll assistant who facilitates your taxes and super.
* We proactively chase timesheet approvers to ensure you get paid on-time and error free.
* Regular visits to Canberra for coffee, lunches and quarterly drinks events.
* We can facilitate novated car leases, LAFHA or salary sacrifice.
* We'll keep you up to date with the most appropriate, interesting opportunities in your field.
* Community matters. Kinexus supports women in Defence through our female mentoring program and rewards referrers through our Referral Rewards scheme.
* Support for your health and wellness through counselling support (EAP) available for all contractors and their families.
* Kinexus is the leading recruitment partner to the defence industry in Australia. We support our community in making intelligent connections and create opportunities to help grow careers.
All applications should include your resume as a word document.
For more information, visit our website, www.kinexus.com.au or contact Cindace Prasad on 0449 511 ***.
#LI-CP #SCR-cindace-prasad