We’re looking for a Senior IAM Engineer to lead the design and delivery of AFCA’s next-generation Identity and Access Management (IAM) capability.This is a key role supporting a major transformation program, where you’ll help replace legacy identity solutions and establish a modern, scalable CIAM and workforce identity platform. You’ll take ownership of end-to-end IAM solution design and implementation, ensuring identity is secure, seamless and enables strong customer and workforce experiences across our digital ecosystem.In this role you will:Lead and own the end-to-end design and implementation of enterprise IAM solutions across transformation programs, covering both CIAM (external users) and workforce identity.Drive evaluation and selection of IAM platforms (e.g. evolution of Azure B2C / Microsoft Entra External ID or alternatives), including defining target-state architecture and transition roadmap, vendor engagement and supporting commercial considerations.Translate enterprise and solution architecture into practical, secure, and scalable IAM designs that can be delivered by engineering teams, incorporating automation, Infrastructure as Code (IaC), and CI/CD practices where appropriate.Provide hands-on engineering leadership across the IAM lifecycle (design, build, integration, and run), including complex troubleshooting and decision-makingDesign and implement integrations across AFCA’s application ecosystem (e.g. Dynamics 365, ServiceNow, APIs, portals), including:OIDC / OAuth2 authentication flowsToken design and validationAPI and service-to-service authentication patternsImplement identity lifecycle management, RBAC models and least privilege accessDesign and strengthen identity security controls (MFA, conditional access, modern authentication)Identify and mitigate identity-related security risks, including fraud and account takeover threats
