Identity and Access Management (IAM) Officer

About this role

*Employment Type:*Ongoing

Classification: Parliamentary Service Level 4

Contact: Kerry Brookshaw, (02) 6277 9237, Kerry.Brookshaw@aph.gov.au

The Opportunity*

The Department of Parliamentary Services (DPS) is recruiting for Parliamentary Services Level 4 Identity and Access Management Officer within the Cyber Security Branch.

The Cyber Security Branch is responsible for protecting the information, systems and digital services that support the Australian Parliament and the parliamentary departments. Within the branch, the Identity and Access Management (IAM) team plays a critical role in ensuring the right people have the right access to the right systems at the right time.

As an Identity and Access Management Officer, you will be responsible for supporting the full ICT identity lifecycle across diverse parliamentary environments. This includes onboarding and offboarding users, processing access requests, validating permissions, maintaining identity records and supporting compliance with access control requirements. You will work closely with parliamentary departments, Senators and Members, electorate staff, parliamentary service employees, ICT teams and business stakeholders to deliver secure and timely access outcomes.

The role combines customer service, security, governance and technical administration, providing valuable exposure to enterprise identity technologies, access management processes and cyber security operations. You will help safeguard access to systems that support the daily operation of Parliament while contributing to the continuous improvement of departmental IAM practices and procedures.

This is an excellent opportunity for someone looking to build a career in cyber security. Few roles offer the same breadth of exposure to identity management, security controls and stakeholder engagement across such a unique and high-profile operating environment.

Who we are looking for*

We are seeking a motivated and customer-focused individual who can balance strong service delivery with sound security practices.

The ideal candidate will demonstrate

• Strong communication and interpersonal skills, with the ability to work effectively with a diverse range of clients and stakeholders.
• A commitment to delivering high-quality customer service and achieving timely outcomes.
• The ability to analyse information, apply established procedures and exercise sound judgement when managing access requests.
• Strong attention to detail and the ability to maintain accurate records and documentation.
• The ability to manage competing priorities and work effectively in a fast-paced operational environment.
• A collaborative approach and the ability to build positive working relationships across technical and non-technical teams.
• An interest in cyber security, identity management and access governance principles.
• A proactive mindset with a willingness to learn new technologies and continuously improve processes.

Knowledge, Experience and Qualifications

• Experience working in an ICT support, service delivery, administration, access management or related operational environment.
• Demonstrated ability to follow documented procedures and work within established governance frameworks.
• Experience working with user accounts, access requests, identity systems or business applications would be advantageous.
• Understanding of basic information security principles and the importance of access controls.
• Experience working with Microsoft technologies, enterprise applications or identity management platforms would be desirable.

Job Specific Requirements

• The successful applicant will be required to obtain and maintain a Negative Vetting 1 (Confidential/Highly Protected/Secret) security clearance.

At DPS, we are committed to building a diverse and inclusive workplace that ensures all our people can contribute to our shared purpose. We encourage applications from Aboriginal and Torres Strait Islander people, people with disability, people with caring responsibilities, people who identify as LGBTQIA+, people from cultural and linguistically diverse backgrounds, people who identify as neurodivergent, and mature aged people.

Duty Statement*

*Classification:*Parliamentary Service Level 4

*Branch:*Cyber Security

*Section:*Cyber Security Operations

*Immediate supervisor:***Assistant Director, Identity and Access Management

Duty Statement

Under limited/general direction undertake duties in accordance with the agreed standards for the specified classification. The duties will include, but are not limited to, the following:

1. Completion of account lifecycle related requests for a variety of clients across the APH environments, including Parliamentary Departments, Parliamentarians and their Staff.

2. Assist in the maintenance of IAM procedures for the department.

3. Promote good security practice and provide advice and guidance to clients on IAM procedures.

4. Build and sustain professional relationships with team members and clients.

Selection Criteria

1. Demonstrated ability to undertake identity and access management activities in a secure, accurate and timely manner, including user onboarding, account maintenance, access provisioning, access changes and offboarding in accordance with approved procedures.

2. Sound understanding of ICT security principles and access control practices, including the importance of least privilege, appropriate approval pathways, segregation of duties, account lifecycle management and protecting sensitive information.

3. Demonstrated ability to deliver high-quality client service to a diverse client base, including the ability to interpret requests, provide clear advice, manage competing priorities and escalate issues appropriately.

4. Well-developed written and verbal communication skills, including the ability to document actions accurately, maintain procedures, explain IAM processes clearly and promote good security practice to clients and stakeholders.

5. Ability to work collaboratively and build effective working relationships, including with team members, internal business areas, Parliamentarians’ offices and other stakeholders across APH-supported environments.

6. Demonstrated attention to detail, judgement and integrity when handling ICT accounts and access permissions, including the ability to follow policy, identify anomalies or risks, and maintain accurate records to support auditability and compliance.

Employees of DPS are required to be able, and to be seen to be able, to provide professional advice and services to all Senators and Members without favour or prejudice.

How to apply*

Please upload a pitch (750 words maximum) describing how your skills and experience would contribute to the role and work of the department.

Your pitch is an opportunity to tell us why you want to work at DPS, why you are interested in the role and what you can offer in the role. Frame your pitch around the role description and relevant ILS Profile. Make sure to use relevant examples and accomplishments that demonstrate your ability to perform the role.

For additional guidance when crafting you application, please refer to the DPS Recruitment - Candidate Information Pack, which provides helpful tips on how to structure your pitch and highlight your most relevant skills and experience effectively.

Our purpose and values*

We proudly provide innovative, unified, and client-focused services to the Australian Parliament and parliamentarians. We are a values driven department, placing our values at the heart of everything we do; from our service offerings and decision making to our interactions with stakeholders and each other.

Our people are employed in a broad and unique range of professional, customer service and trade-based roles, all joined by a shared purpose: to make an enduring contribution to Australia’s parliamentary democracy. We have an inclusive workplace that reflects the diversity of the community we serve.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.