The Role

As an ASD 6 Azure EntraID Engineer you will be part of a larger team to coordinate and contribute to the overall Cloud Division goals. You will work consistently to a defined technology delivery plan and where needed, provide specialist cloud technology advice and assistance to other team members. You will work alongside other Cloud Division cloud engineers and contribute to the successful delivery of platform solutions in support of ASD capability.

• Designing, implementing, and managing identity and access management (IAM) policies, roles, and access controls to ensure secure and efficient access to cloud resources.
• Configuring, managing, and troubleshooting Microsoft Entra ID, including features like multi-factor authentication, single sign-on (SSO), and access control.
• Implementing and maintaining monitoring and logging solutions to track system performance, identify potential problems, and ensure compliance.
• Responding to incidents and troubleshooting issues related to cloud infrastructure.
• Assisting with performing root cause analysis and implementing preventive measures to avoid future incidents.
• Work collaboratively with stakeholders and subject matter experts to progress cloud business activities.
• Ensuring that cloud infrastructure complies with security standards and regulations, such as the Information Security Manual (ISM) and the Protective Security Policy Framework (PSPF).

As an ASD EL1 Azure EntraID Engineer you will (in addition to the above) work independently with reasonable autonomy and accountability to achieve outcomes of existing technology delivery plans. You will work alongside other Cloud Division cloud engineers, solution architects and mission teams to contribute to the successful delivery of platform solutions in support of ASD capability.

Both ASD 6 and EL1 Azure EntraID Engineer can expect to work closely with the engineering teams and platform stakeholders to ensure the platform is meeting business need. This includes understanding and documenting platform requirements and functional specifications, including ongoing sustainment and technical feasibility of the platform. You will contribute to strategic planning and be accountable towards ongoing self-improvement and professional development.

ASD provides professional skilling and on the job training, and proactively supports career growth within the organisation.

Further information can be found at: I’m changing my career | Australian Signals Directorate (asd.gov.au)

About our Team

Are you ready to elevate your career to new heights? Join our team of cloud trailblazers who are building secure cloud platforms for the Australian Signals Directorate (ASD). We are seeking talented individuals with a passion for innovation, a commitment to excellence and an appreciation of security. ASD is harnessing the power of cloud technology to revolutionise its operations and advance national security. By leveraging cloud capabilities, ASD has rapidly scaled and deployed cutting-edge solutions to support its mission-critical work. At the same time, Cloud enables ASD to innovate and experiment with new technologies, enhance collaboration and information sharing, and improve the speed and accuracy of its intelligence analysis. ASD is positioning itself at the forefront of technological innovation and cementing its role as a technology leader in the National Intelligence Community. We are seeking people for a range of functions related to cloud including technology, financial operations, security, and project management.

With Cloud, ASD can stay ahead of the evolving threat landscape, enhance its cybersecurity posture, and better support Australia's foreign policy interests. By embracing Cloud, ASD is positioning itself at the forefront of technological innovation and cementing its role as a leader in the National intelligence community.

Our Ideal Candidate

An ASD 6 Azure EntraID Engineer ideal candidate will have the following:

• Demonstrated experience in implementing, configuring, and maintaining EntraID.
• Experience with EntraID connect and directory synchronization.
• Experience in ICT solutions across hybrid and commercial cloud.
• Experience in PowerShell, Microsoft Graph API.
• Knowledge of Cloud Frameworks.
• Knowledge and experience with sign-in and audit logs.
• Experience in configuration of Sentinel for ID security.
• Sound understanding of compliance with national security regulations.
• Experience in user, group and application lifecycle management and proficient in implementing conditional access policies with understanding of identity governance.
• Understanding of multifactor authentication methods and previous experience in implementing role based access control.
• Proficient with configuring and managing external identities, B2B technology.
• Experience with identity protection policies and privileged identity management, including security access controls across on-premise and cloud environments.
• Understanding of OAuth, OpenID, SAML and federation concepts.

An ASD EL1 Azure EntraID Engineer ideal candidate will have the following (in addition to the above):

• Ability to contribute to project planning efforts, advocate governance and approval processes.
• Robust communication skills, including the ability to explain complex problems to key stakeholder.
• Strong technical and leadership skills to motivate and guide team members to deliver high quality cloud solutions.

ASD is seeking applicants to fill current and anticipated vacancies and to create a merit pool for future vacancies. In line with the Australian Public Service Commissioner’s Direction 2022, upon completion of the recruitment activity, the merit pool will be available to locations across Australia.

Application Closing Date: Monday 21st April 2025

For further information please review the job information pack, reference ASD/03019/25 on http://www.asd.gov.au/careers.