Identity Platform Engineer

About cybr:co

cybr:co is an Australian identity security consultancy. We help organisations get identity right, from strategy and design through to hands-on engineering, so they end up with security they can trust and own. We're a team of senior specialists working with enterprise, financial services and government clients.

The role

Identity is the control plane for modern security, and for most of our clients it runs on Active Directory and Entra ID. As an Identity Platform Engineer, you'll own that base layer: designing, building and hardening hybrid directory environments, and connecting them to the rest of the identity stack.

You'll work on cybr:co-led engagements and on longer-term assignments embedded with client teams. In both, you'll be client-facing: shaping solutions, presenting to stakeholders and delivering the work. We'll always be clear about what an assignment involves before it starts.

What you'll do

Engineer the platform

• Design, build and harden hybrid AD and Entra ID environments, including multi-forest estates, cloud migrations and tiered administration models
• Run AD and Entra ID security assessments and turn the findings into practical remediation roadmaps
• Design and implement Conditional Access, MFA, SSO, federation and app provisioning
• Automate identity operations and reporting with PowerShell and Microsoft Graph
• Work with our specialists to integrate the directory with PAM, IGA and identity threat protection platforms such as BeyondTrust, SailPoint and Silverfort

Advise and solution

• Run discovery workshops and turn business requirements into identity designs
• Help write solution designs, estimates and proposals for new work
• Present findings and designs to client stakeholders, from engineers to CISOs
• Document and hand over your work so client teams can run it confidently after we leave

What you'll bring

• Deep hands-on Active Directory experience: forest and domain design, GPO, ADCS, tiered administration, and AD security and hardening
• Strong Entra ID experience: Conditional Access, hybrid identity (Entra Connect / Cloud Sync), authentication methods, app integration and PIM
• A solid grounding in IAM principles: identity lifecycle (joiner-mover-leaver), least privilege, RBAC, privileged access and governance
• Working knowledge of SAML, OAuth 2.0 and OIDC, and PowerShell scripting skills
• Confidence presenting to clients and shaping a solution, not just carrying out a task list
• A current Baseline or NV1 clearance, or eligibility to get one (Australian citizenship is generally required)

Nice to have

• Experience with other identity platforms such as SailPoint, Saviynt, Okta, Ping, BeyondTrust, CyberArk, Delinea or Silverfort
• Microsoft identity certifications (e.g. SC-300)
• Infrastructure-as-code experience (Terraform or similar)
• A consulting or professional services background

Two levels

We're hiring at two levels, and we'll shape the role and package around your experience:

Why cybr:co

• Work with a team of experts who love to mentor.
• We take the time to do the work properly and build client relationships that last.
• We invest in your certifications and put you on live engagements where you'll use them.
• You'll help shape the practice as we grow.
• Variety: project engagements and embedded assignments across enterprise, financial services and government clients, with a team behind you either way
• Hybrid working

How to apply