Engineer, Identity and Access Management

*ASX: Powering Australia's financial markets
Why join the ASX?*
When you join ASX, you're joining a company with a strong purpose – to power a stronger economic future by enabling a fair and dynamic marketplace for all.

In your new role, you'll be part of a leading global securities exchange with a strong brand. We are known for being a trusted market operator and an exciting data hub.

Want to know why we are a great place to work, click on the link to learn more.

*We are more than a securities exchange*
The ASX team brings together talented people from a diverse range of disciplines.

We run critical market infrastructure, with 1 in 3 people employed within technology. Yet we have a unique complexity of roles across a range of disciplines such as operations, program delivery, financial products, investor engagement, risk and compliance.

We're proud of the diversity of our organisation and the culture of inclusion that all our people help to build every day. Our employee-led groups are known for celebrating cultural and religious events, championing LGBTIQ+ inclusion (recently achieving AWEI Bronze), inspiring giving and volunteering, promoting gender equality, and wellbeing. We are an Employer of Choice for Gender Equality (WGEA) and a member of the Champions of Change Coalition for the advancement of gender equality in Australia.

About The Role
We're seeking a talented Identity Platform Engineer to join our Security Governance team. This is a critical IT security role, responsible for the engineering, operation, and support of our core identity platforms—ensuring secure and efficient management of user identities, access, and entitlements across both on-premises and cloud environments.

• Location: Sydney CBD (3 days in office, flexible arrangements)
• Team: Security Governance

What You'll Do

• Provide operational support for Identity and Access Management platforms (Ping Identity, SailPoint IdentityIQ, BeyondTrust PAM)
• Become a subject matter expert for BeyondTrust PasswordSafe
• Monitor, troubleshoot, and resolve incidents affecting identity systems, ensuring minimal downtime
• Manage and patch Linux and Windows operating systems supporting IAM applications, aligned with security and compliance standards
• Maintain and enhance DevOps pipelines for IAM platforms, enabling automated builds, testing, and deployments
• Develop infrastructure-as-code and automation scripts to improve reliability and efficiency
• Support migration of identity services to AWS cloud infrastructure
• Engineer solutions for high availability, scalability, and compliance in a regulated financial services environment
• Collaborate with security architects and platform teams to design secure integration patterns
• Partner with cybersecurity, infrastructure, and application teams for seamless identity service integration
• Contribute to IAM roadmap delivery and continuous improvement initiatives
• Provide 3rd level IAM support via SNAP and email queue
• Produce and maintain documentation for relevant platforms
• Organise and document annual exercises (documentation accuracy, platform database restores, BCP)

What You'll Bring

• Proven experience supporting Windows and Linux servers with an identity/security focus
• Hands-on experience managing CI/CD pipelines and DevOps tooling (Jenkins, GitLab CI, GitHub Actions, AWS Code Pipeline)
• Strong understanding of Privileged Access Management solutions (BeyondTrust, CyberArk, etc.)
• Familiarity with AWS services relevant to IAM migrations (EC2, RDS, Lambda, IAM, Secrets Manager)
• Knowledge of Java-based application deployment and support
• Problem-solving skills and ability to diagnose complex system issues
• Experience with ITIL processes for incident, problem, and change management
• Background in Identity Access Management (IAM) applications: PAM, Active Directory, Microsoft CA, Exchange, EntraID, HSM Devices, SQL/Oracle databases, AWS/GCP cloud services
• Network infrastructure troubleshooting (firewalls, routing)
• Technical documentation skills

Bonus Skills

• Experience with SailPoint, Forgerock, HashiCorp, SSL, SAML, OAuth, PKI, MFA
• Scripting (PowerShell), LDAP query syntax
• PowerBI or PowerAutomate
• Control identification/creation for identity management
• Enterprise Password Management tools
• Financial services experience
• Infrastructure-as-code (Terraform, CloudFormation)
• Containerisation (Docker, Kubernetes)

Success Measures

• Identity platforms remain highly available, patched, and compliant
• Seamless migration of identity workloads to AWS
• Reduction in manual intervention through automation and DevOps
• Effective incident resolution within agreed SLAs
• Strong stakeholder satisfaction with IAM platform reliability and support

What You'll Enjoy

• Strong control awareness in a no-compromise security environment
• Collaborative culture focused on best-practice security protocols
• Opportunities to innovate and automate
• Supportive, inclusive team environment
• Adaptability and initiative valued

We make hiring decisions based on your skills, capabilities and experience, and how you'll help us to live our values. We encourage you to apply even if you don't meet all the criteria of this role. If you need any adjustments during the application or interview process to help you present your best self, please let us know.

At ASX Group, our diverse workforce is essential to build and maintain a fair and dynamic marketplace. We support flexible working and offer hybrid working options. Even if our roles are advertised as full-time, we encourage you to apply if you are interested in part-time or other flexible working arrangements.

We will arrange for successful candidates to have background checks, including reference and police checks completed as part of the on-boarding process.