Skip to main content
AfterDuty
Register CV

Head of IAM

Downer Group · Sydney, New South Wales

Type
Full-time
Posted
2 days ago

Overview

Your experience leading teams and managing risk in high-pressure environments gives you a foundation in operational discipline, but this role demands deep technical expertise in identity platforms like Microsoft Entra ID and Privileged Access Management that most policing careers do not provide. Without several years of hands-on IAM engineering and architecture, you would struggle to deliver the strategy and modernisation this senior leadership position requires.

About this role

We have an exciting opportunity for Head of Identity & Access Management (IAM) to join Downer's Group Technology team within the Cloud & Networks function.

This is a senior leadership role suited to a highly influential technology professional who thrives in a complex enterprise environment and is passionate about building secure, scalable, and resilient identity services that enable business growth, operational excellence, and cyber security maturity.

Reporting to the General Manager, Cloud & Networks, you will lead the engineering, delivery, and operational performance of Downer's enterprise Identity & Access Management capability across workforce, privileged, partner, customer and non-human identities. You will play a critical role in modernising identity platforms, supporting Downer's evolving Zero Trust strategy, and ensuring secure access across a geographically dispersed organisation operating throughout Australia and New Zealand.

Working closely with the Chief Information Security Officer (CISO) and broader Cyber Security, Cloud, Enterprise Architecture, HR Technology, and business leadership teams, you will drive the continuous improvement of identity services while ensuring alignment with governance, risk, compliance, and operational requirements.

This is an influential leadership role suited to a strategic technology leader with a proven track record of delivering enterprise-scale IAM transformation and building high-performing teams, while driving measurable outcomes across cyber security, operational resilience, user experience, and business enablement.

*In this role you will

  • Lead the strategy, architecture, engineering, and lifecycle management of Downer's enterprise IAM platforms and services.
  • Drive the modernisation and consolidation of identity technologies, including Microsoft Entra ID, Active Directory, Identity Governance, Privileged Access Management (PAM), Single Sign-On (SSO), and Multi-Factor Authentication (MFA).
  • Develop and execute the IAM roadmap aligned to Downer's technology strategy, Zero Trust objectives, digital transformation agenda, and cyber security priorities.
  • Lead the delivery and operation of workforce, privileged, partner, machine, and workload identity capabilities across the enterprise.
  • Ensure the reliability, performance, security, and availability of critical IAM services supporting approximately 33,000 employees, contractors, partners, and digital identities.
  • Partner closely with the CISO function to translate identity policies, control requirements, and governance objectives into secure and scalable platform solutions.
  • Drive automation, self-service, and operational excellence across identity processes, including Joiner, Mover and Leaver (JML) lifecycle management.
  • Lead IAM-related incident, major incident, change, and problem management practices, including support for cyber security response activities.
  • Manage strategic vendor relationships across IAM technologies, managed service providers, and implementation partners.
  • Develop business cases, manage technology investments, and deliver measurable value across identity security, risk reduction, and operational efficiency.
  • Lead, mentor, and develop a high-performing team of IAM architects, engineers, platform specialists, and product professionals.
  • Build a strong culture of accountability, innovation, continuous improvement, and customer-focused service delivery.
  • This is a highly visible leadership role where you will shape the future of identity security at Downer while delivering secure, reliable, and efficient identity services that support the organisation's strategic objectives.

Our Ideal Candidate

You are a strategic and operational technology leader with deep expertise in Identity and Access Management and a passion for delivering secure and scalable identity solutions within large, complex enterprise environments.

You bring

  • Tertiary qualifications in Computer Science, Information Technology, Engineering, Cyber Security, or a related discipline.
  • 15+ years of technology experience, including significant experience leading enterprise IAM engineering and operations functions.
  • Proven success delivering large-scale IAM transformation programs, including directory consolidation, cloud identity adoption, Privileged Access Management, and Identity Governance initiatives.
  • Deep expertise in Microsoft Entra ID, Active Directory, Identity Governance platforms, Privileged Access Management, authentication technologies, federation, and cloud identity services.
  • Experience operating within a federated security model and partnering closely with Cyber Security leadership teams.
  • Strong knowledge of modern Zero Trust principles, Identity Governance & Administration (IGA), PAM, MFA, SSO, machine identity, and secrets management.
  • Demonstrated experience driving platform reliability, automation, operational excellence, and service improvement outcomes.
  • Strong commercial acumen with experience managing budgets, strategic vendors, contracts, and outsourced delivery partners.
  • Experience operating within highly regulated, critical infrastructure, utilities, construction, transport, defence, or industrial environments.
  • Strong understanding of Australian cyber security, privacy, and risk management frameworks including Essential Eight, ISO27001, NIST CSF, SOCI Act, and the Privacy Act.
  • Relevant certifications such as CISSP, CISM, Microsoft SC-300, Azure Solutions Architect, SailPoint, CyberArk, or related credentials will be highly regarded.
  • You are known for building trusted relationships, influencing stakeholders, developing high-performing teams, and delivering pragmatic solutions that balance security, operational requirements, and business outcomes.

What We Can Offer You

  • A senior leadership opportunity to shape and mature Identity & Access Management capability across a large and diverse ASX-listed organisation.
  • The opportunity to lead critical cyber security and identity transformation initiatives that directly support business growth and resilience.
  • Grow your career with us, we are passionate about giving our people opportunities to grow through personal and professional development and continuous learning:
  • Professional development programs
  • Access to professional memberships and industry networks
  • Be part of a team that cares, we foster a work environment built on support that is flexible around our employee’s wellbeing needs:
  • Flexible work arrangements
  • Parental leave
  • Employee Assistance Program
  • Programs promoting diversity and inclusion
  • A range of Corporate Benefits, including:
  • Discounted services (car hires, hotels, insurance, retail stores, gyms)

Why Downer?

As a trusted name in infrastructure, transport, facilities management, and construction, Downer is committed to delivering projects that create a lasting, positive legacy. We’re committed to building a team that reflects the diverse communities we serve, and we welcome people of all ages, genders, sexual orientations, cultures, abilities, and lived experiences. We especially encourage applications from those whose voices have traditionally been underrepresented in our industry, including women, Aboriginal and Torres Strait Islander Peoples, Māori and Pasifika Peoples, veterans, people with disability, and neurodivergent individuals. Even if your experience doesn’t align perfectly with this role, we’d still like to hear from you. If it feels like the right fit, apply - potential counts, and so do you.

As a WORK180 Endorsed Employer, we support flexibility that works for your life, inclusive leadership that values your voice, and equitable access to opportunity so you can do your best work and bring your whole self to it.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.

See all cyber security & digital forensics jobs in Sydney →

Why this fits a police background

  • Incident command & response
  • Working to legislation & regulation
  • Team & shift leadership

More cyber security & digital forensics jobs for ex-police

  • Full-time

    Your background running operational units and coordinating multi-agency responses maps directly onto leading national support functions and ensuring consistent, secure operations across multiple sites. You're used to setting clear accountabilities, managing risk, and driving continuous improvement, which is exactly what this role requires. Your experience with compliance and governance, from PACE to internal procedures, means you can bring structure and discipline from day one.

    Posted 2 days ago

  • Full-time

    Your experience working to strict regulatory frameworks like PACE and CPIA gives you a natural grounding in compliance and assurance, which is exactly what this cyber security GRC role demands. You've spent years maintaining accurate records, managing risk registers, and engaging with diverse stakeholders under pressure, so coordinating audits and driving adherence to standards like ISO 27001 will feel familiar. The role is a development opportunity, so your proven attention to detail and process-oriented mindset will let you build the specific cyber security knowledge on the job.

    Posted 5 days ago

  • Integrity and Security Analyst

    NSW Government · Sydney

    Full-time

    A$133,348 – A$146,945Estimated

    This role directly leverages your operational intelligence experience from policing — you'll produce intelligence products that identify security risks and inform frontline decisions, just as you did under the National Intelligence Model. Your ability to assess threats, manage multi-agency coordination, and apply legislative frameworks like PACE or RIPA is exactly what the NSW Electoral Commission needs to safeguard election integrity. The requirement for 10+ years in law enforcement confirms this is a role built for your background, not a sideways move into a completely new field.

    Posted 5 days ago

  • Full-time

    Your investigative experience from policing—evidence handling, chain of custody, case file management, and conducting structured interviews—maps directly onto the core responsibilities of this insider threat role. You are used to working with sensitive information, maintaining confidentiality, and producing defensible reports for multiple stakeholders, which is exactly what this position demands. The analytical and risk-assessment skills you developed through intelligence-led policing and managing complex investigations will let you hit the ground running in identifying and mitigating insider

    Posted 7 days ago