About the role
We're hiring an experienced IAM Engineer with deep, hands‐on experience designing, implementing and operating enterprise‐scale SailPoint Identity solutions. In this role you'll deliver automated identity lifecycle (JML) workflows, scalable role and entitlement models, access governance, and complex IIQ customizations. Complementary experience with CyberArk PAM and Microsoft Entra ID (Azure AD) is essential to support identity security and Zero Trust alignment. You'll work across security, cloud and infrastructure teams to deploy secure, compliant and automated IAM capabilities.
Key Responsibilities
* Design, build and maintain end‐to‐end Joiner/Mover/Leaver (JML) workflows in SailPoint IdentityIQ.
* Develop IIQ rules, workflows, connectors, lifecycle events.
* Create scalable role models and entitlement structures that enforce least privilege.
* Plan and run access certification campaigns: scoping, scheduling, remediation, reporting.
* Onboard applications to SailPoint: entitlement mapping, provisioning logic and reconciliation.
* Integrate SailPoint with directories and SaaS apps via REST APIs, JDBC, AD, LDAP and custom connectors.
* Troubleshoot and resolve complex provisioning, de‐provisioning and reconciliation issues across hybrid environments.
* Automate operational tasks, improve governance via policy/process/solution enhancements.
* Support platform upgrades, performance tuning, health fixes and CI/CD deployment pipelines.
* Align Entra role governance with SailPoint access structures; support SSO/federation (SAML, OAuth2, OIDC).
* Contribute to Conditional Access policy refinement and identity risk investigations.
* Support CyberArk PAM onboarding, credential rotation, API integrations and JML alignment with PAM governance.
* Drive continuous improvement, stay current with IAM trends, and support ICAM leadership with reporting and risk communication.
Required Experience & Skills
* 4‐5 years of extensive, hands‐on experience designing, implementing and operating SailPoint Identity/ISC at enterprise scale.
* Experience with CyberArk PAM and proven PAM integrations and onboarding.
* Strong practical experience with Microsoft Entra ID / Azure AD, Conditional Access policies, and AD.
* Solid understanding of identity governance, PAM, SSO, MFA, LDAP and federation standards (SAML/OAuth2/OIDC).
* Proficiency with Java / BeanShell for IIQ customizations; PowerShell or other scripting skills desirable.
* Experience building scalable role and entitlement models and running access certification campaigns.
* Knowledge of regulatory and compliance requirements for identity and access management.
* Experience with Technical Change Management and Problem Management processes.
* Strong analytical, problem‐solving, communication and cross‐functional collaboration skills.
* Able to manage multiple priorities in a fast‐paced environment and deliver results.
Qualifications
* Degree / Diploma / Certificate / Post‐Graduate qualification in Computer Science, Information Security or related field preferred (or equivalent experience).
* Relevant certifications (SailPoint, CyberArk, Microsoft) advantageous.
Imagine Working With Us
We understand that work means different things to everyone, and we know happy, healthy people make great teams. We're reinventing work to help you and your family thrive, with a focus on connection, personal development and health and wellbeing. To learn more about our benefits, visit https://careers.medibank.com.au/culture/rewards-benefits/
Inclusion and Accessibility
We believe in everyone's potential and strive to make Medibank inclusive for all. We encourage applications from Aboriginal and Torres Strait Islander peoples, neurodivergent candidates, LGBTQIA+ community including transgender and gender diverse candidates, and candidates with a disability.
#J-18808-Ljbffr