Engineer, Customer Identity And Access

ASX: Powering Australia's financial marketsWhy join the ASX?
When you join ASX, you're joining a company with a strong purpose – to power a stronger economic future by enabling a fair and dynamic marketplace for all.In your new role, you'll be part of a leading global securities exchange with a strong brand.
We are known for being a trusted market operator and an exciting data hub.Want to know why we are a great place to work, click on the link to learn more. are more than a securities exchange
The ASX team brings together talented people from a diverse range of disciplines.We run critical market infrastructure, with 1 in 3 people employed within technology.
Yet we have a unique complexity of roles across a range of disciplines such as operations, program delivery, financial products, investor engagement, risk and compliance.We're proud of the diversity of our organisation and the culture of inclusion that all our people help to build every day.
Our employee-led groups are known for celebrating cultural and religious events, championing LGBTIQ+ inclusion (recently achieving AWEI Bronze), inspiring giving and volunteering, promoting gender equality, and wellbeing.
We are an Employer of Choice for Gender Equality (WGEA) and a member of the Champions of Change Coalition for the advancement of gender equality in Australia.What's On OfferASX are seeking a highly skilled IAM Forgerock Developer to take ownership of our customer identity practice within a leading financial services environment.
This is hands on leadership role responsible for designing, building, and maintaining enterprise-grade identity and access (IAM) solutions across a complex ecosystem.The successful candidate will drive the design and implementation of federated identity services, leveraging Forgerock (Ping) IAM suite to deliver secure, seamless, and scalable solutions for millions of customers.The role requires deep technical expertise and the ability to lead and mentor other engineers, while collaborating with architects, technology teams, and business stakeholders.What You'll DoLead the design, development, and implementation of Forgerock based IAM solutions, including authentication, authorisation, directory, and identity API services.
Provide ongoing support, troubleshooting, and maintenance of identity platforms, including participation in 24/7 on-call support rotation (shared across a team)Deliver federated identity solutions using protocols such as OAuth 2.0, OpenID Connect, and SAML 2.0.Implement CI/CD pipelines for IAM solutions, ensuring automation, testing, and secure deployment.Provide technical leadership to the IAM engineering team, ensuring best practices in coding, design patterns, and DevSecOps are applied.Collaborate with Enterprise Architects, Product Owners, and security stakeholders to align IAM strategy with business and regulatory requirements.Develop customisations, integrations, and extensions using Groovy, JavaScript, and Java.Ensuring IAM solutions support regulatory compliance, risk management, and operational resilience.What You've DoneExtensive hands-on experience with the ForgeRock Identity Platform (Access Manager, Identity Manager, Directory Services, Identity Gateway).
Strong understanding of IAM standards and protocols: OAuth 2.0, OpenID Connect, SAML 2.0, SCIM.Experience designing and implementing federated identity solutions across large-scale enterprise or financial services platforms.Proficiency in scripting and programming: Groovy, JavaScript, Java (additional languages advantageous).
Experience with CI/CD pipelines, automation frameworks, and containerisation (Jenkins, GitLab CI, Docker, Kubernetes).
Strong knowledge of identity lifecycle management, access governance, privileged access, and role-based access control.Demonstrated ability to lead and mentor technical teams, while remaining hands-on with development and troubleshooting.Experience in financial services or other highly regulated industries is desirable.And if you've got some of this, even better:Knowledge or experience with the SailPoint Identity PlatformMust be able to think out of the box.
The ability to troubleshoot non-standard / undocumented issues, to look at the big picture and determine a solution that fits within the existing frameworkBe confident to provide input to assist with continual improvementsAccountable for execution according to established standards, procedures, and processesAccountable for day-to-day Identity & Access system queue and provide 2nd / 3rd level phone supportEssential to follow current standards in IAM policies and proceduresActive Directory administration and troubleshooting skillsUnderstanding of LDAP and directory query services and tools (PowerShell scripting)Cloud platforms and applications technologies (Google, Azure and AWS)Experience in facilitating business process design and riskWhat you need to enjoy and be good at for this role:Keen developer mindset who likes delivering good experiences for customersStrong control awareness in an environment where there is no compromise on process controlsAnalytical approach to identify current user profiles, map them to access matrices / models / roles and ensure these are maintained and reviewed appropriatelyEnjoy working in a collaborative environment to implement and maintain best practice security protocolsInquisitive nature to question the process to drive innovationBe a self-starter and take initiative to communicate, interact and cooperate with othersAbility to adapt to high pressure situations and prioritiesWillingness to have a laugh with your team membersWe make hiring decisions based on your skills, capabilities and experience, and how you'll help us to live our values.
We encourage you to apply even if you don't meet all the criteria of this role.
If you need any adjustments during the application or interview process to help you present your best self, please let us know.At ASX Group, our diverse workforce is essential to build and maintain a fair and dynamic marketplace.
We support flexible working and offer hybrid working options.
Even if our roles are advertised as full-time, we encourage you to apply if you are interested in part-time or other flexible working arrangements.We will arrange for successful candidates to have background checks, including reference and police checks completed as part of the on-boarding process.