Position Description

About the Client

The client operates within a systems integration services environment, delivering secure, enterprise-scale technology solutions. They support complex infrastructure across government or highly regulated sectors, with a strong emphasis on standardisation, automation, and security.

About the role

As a Keycloak Senior Developer, you will be a senior technical contributor delivering Keycloak configurations and extensions for a distributed environment. You will work closely with the Technical Lead to implement robust realm/client designs, authentication flows, and integrations aligned to modern authentication needs (OIDC/OAuth2/SAML, SSO, identity brokering).

What you’ll be responsible for

• Implementing advanced Keycloak configurations for OIDC/OAuth2/SAML, SSO, and identity brokering.

• Building Keycloak patterns suitable for distributed deployments (multi-site / multi-environment consistency).

• Implementing federation/integration with identity sources (e.g., LDAP-based federation) and shaping token/claims mapping to meet application requirements.

• Implementing strong authentication patterns (e.g., MFA, certificate-based auth) as required for security posture.

• Contributing to configuration-as-code practices so Keycloak configuration can be versioned, promoted, and audited.

• Performing peer reviews, uplifting engineering standards, and supporting defect triage across authentication flows and integrations.

• Supporting operational hardening activities (secure baseline config, logging/audit, backup/restore testing).

What we’re looking for

• 4–6+ years’ experience in IAM / security engineering roles.

• 3+ years’ hands-on Keycloak experience.

• Strong experience implementing OIDC/OAuth2 and/or SAML SSO integrations.

• Strong troubleshooting skills across authentication flows, tokens, and federation.

• Role level requirement: Degree or equiv exp

• Role level requirement: Technical expertise

• Role level requirement: Some supervision

Technology keywords

Keycloak, Realms/Clients, Authentication Flows, OIDC, OAuth2, SAML, SSO, MFA, LDAP Federation, Token/Claims Mapping, X.509 Certificates, mTLS, Git, CI/CD, GitOps, Kubernetes/OpenShift, Helm, Secrets/Config management, Logging/Monitoring

Security clearance

Current Australian Government Baseline security clearance required. NV1 preferred. Demonstrated interest and willingness to obtain NV2 is highly regarded.

Position Description

About the Client

The client operates within a systems integration services environment, delivering secure, enterprise-scale technology solutions. They support complex infrastructure across government or highly regulated sectors, with a strong emphasis on standardisation, automation, and security.

About the role

As a COTS Guard Engineer, you will support the engineering, configuration and lifecycle management of commercial off-the-shelf gateway or guard technologies in secure environments. The role focuses on controlled product onboarding, baseline management, operational hardening, vendor updates and support for secure cross-domain or gateway services.

What you’ll be responsible for

• Supporting the engineering, configuration and maintenance of gateway or guard products within a controlled enterprise environment.

• Managing product baselines, version control, lifecycle updates and configuration records for COTS components.

• Working with infrastructure, security and configuration management teams to assess updates, patches and product changes.

• Supporting product testing, issue resolution, audit activities and operational support requirements.

• Maintaining documentation for configuration, support procedures and known constraints.

• Contributing to vendor engagement and resolution of technical issues where required.

What we’re looking for

• 5–8+ years’ experience in infrastructure, platform, gateway, security engineering or related roles.

• Experience working with controlled COTS products in secure or highly regulated environments.

• Strong documentation discipline and ability to manage configuration and lifecycle detail.

• Good stakeholder engagement skills and ability to work across engineering, operations and assurance functions.

• Role level requirement: Degree or equiv exp

• Role level requirement: Technical expertise

• Role level requirement: Some supervision

Technology keywords

COTS Engineering, Gateway Technologies, Baseline Management, Configuration Control, Product Lifecycle, Patch Assessment, Operational Hardening, Vendor Management, Documentation, Secure Environments

Security clearance

Current Australian Government Baseline security clearance required. NV1 preferred. Demonstrated interest and willingness to obtain NV2 is highly regarded.

Position Description

About the Client

The client operates within a systems integration services environment, delivering secure, enterprise-scale technology solutions. They support complex infrastructure across government or highly regulated sectors, with a strong emphasis on standardisation, automation, and security.

About the role

We are looking for a Keycloak Analyst / Developer to support delivery of Keycloak-based authentication across a distributed environment. This role is suited to someone early–mid career in IAM who can configure standard Keycloak capabilities, support federation patterns, and contribute to DevSecOps practices under guidance.

What you’ll be responsible for

• Configuring standard Keycloak capabilities including SSO and identity brokering using OIDC/SAML.

• Supporting directory/identity integration patterns (e.g., LDAP federation) and assisting with token/claims mapping.

• Implementing defined authentication flows (including MFA and secure policy settings) under guidance.

• Assisting with configuration-as-code tasks (version control, promotion steps, environment consistency) as part of DevSecOps.

• Supporting defect investigation, configuration updates, and documentation of Keycloak configuration and operational procedures.

What we’re looking for

• 2–4 years’ experience in IAM / security engineering / related platform roles.

• 1–2+ years’ experience with Keycloak (or equivalent IdP), plus strong fundamentals in OIDC/OAuth2 and/or SAML.

• Familiarity with directory concepts and LDAP integration.

• Strong attention to detail and delivery discipline.

• Role level requirement: Cert/Degree

• Role level requirement: Supervised work

• Role level requirement: Developing skills

Technology keywords

Keycloak, OIDC, OAuth2, SAML, SSO, MFA, LDAP, Token/Claims Mapping, Basic scripting (desirable), Git, CI/CD basics, Containers/Kubernetes basics

Security clearance

Current Australian Government Baseline security clearance required. NV1 preferred. Demonstrated interest and willingness to obtain NV2 is highly regarded.

Position Description

About the Client

The client operates within a systems integration services environment, delivering secure, enterprise-scale technology solutions. They support complex infrastructure across government or highly regulated sectors, with a strong emphasis on standardisation, automation, and security.

About the role

We are seeking an Identity Support Engineer to support technical application onboarding into enterprise identity platforms. This role focuses on assisting application teams with onboarding activities, integration troubleshooting, and steady-state support, ensuring applications are correctly and consistently integrated with identity services.

You will work alongside identity engineers, platform teams, and application owners to support onboarding patterns, resolve integration issues, and contribute to repeatable onboarding processes.

What you’ll be responsible for

• Supporting technical onboarding of applications to identity platforms, including:

• Connector configuration and validation

• Attribute and entitlement mapping

• Identity and access flow verification

• Assisting application teams with integration requirements, configuration questions, and issue resolution.

• Supporting onboarding activities across identity capabilities such as:

• Identity governance

• Authentication and authorisation

• Privileged access

• Troubleshooting provisioning, authentication, and authorisation issues during onboarding and post-deployment.

• Executing defined onboarding checklists and patterns to ensure consistent outcomes.

• Maintaining onboarding documentation, configuration records, and support runbooks.

• Supporting defect resolution and minor configuration updates under guidance.

• Participating in handover and hypercare activities following onboarding releases.

What we’re looking for

• 3–5+ years’ experience in identity, access management, or security platform support roles.

• Hands-on experience supporting application integrations with IAM or security platforms.

• Strong understanding of identity concepts such as users, groups, roles, entitlements, and access flows.

• Ability to work with application teams and translate requirements into technical configuration.

• Strong troubleshooting and documentation skills.

• Role level requirement: Degree or equiv exp

• Role level requirement: Technical expertise

• Role level requirement: Some supervision

Technology keywords

Identity & Access Management (IAM), Identity Governance, Application Onboarding, Connectors, Attribute Mapping, Provisioning Support, Authentication Flows, Authorisation Concepts, LDAP, REST APIs, Integration Troubleshooting, Configuration Documentation

Security clearance

Current Australian Government Baseline security clearance required. NV1 preferred. Demonstrated interest and willingness to obtain NV2 is highly regarded.

Position Description

About the Client

The client operates within a systems integration services environment, delivering secure, enterprise-scale technology solutions. They support complex infrastructure across government or highly regulated sectors, with a strong emphasis on standardisation, automation, and security.

About the role

As the DLP Lead, you will lead the implementation and optimisation of data loss prevention capabilities across enterprise platforms and collaboration environments. This role focuses on policy design, classification alignment, alert reduction, operational governance and stakeholder engagement to protect sensitive data.

What you’ll be responsible for

• Leading the design, implementation and tuning of DLP policies across relevant systems and channels.

• Working with security, compliance and business stakeholders to align DLP controls with data protection objectives.

• Improving policy effectiveness, thresholds, exceptions and response processes to reduce false positives and improve operational outcomes.

• Supporting reporting, incident trends, investigations and policy communications where required.

• Maintaining runbooks, procedures and audit-ready documentation for DLP operations.

• Providing technical leadership and mentoring to analysts or engineers supporting the service.

What we’re looking for

• 8–10+ years’ experience in data security, DLP, compliance security or platform security roles.

• Experience designing and operating DLP controls in enterprise collaboration and endpoint environments.

• Strong understanding of data classification, policy tuning, investigations and security governance.

• Ability to lead technical delivery and work effectively across business and security stakeholders.

• Role level requirement: Degree preferred

• Role level requirement: Team leadership

• Role level requirement: Mentoring juniors

Technology keywords

DLP, Data Classification, Data Protection, Policy Tuning, Alert Triage, Reporting, Governance, Compliance, Investigations, Collaboration Security, Endpoint Controls

Security clearance

Current Australian Government Baseline security clearance required. NV1 preferred. Demonstrated interest and willingness to obtain NV2 is highly regarded.

Position Description

About the Client

The client operates within a systems integration services environment, delivering secure, enterprise-scale technology solutions. They support complex infrastructure across government or highly regulated sectors, with a strong emphasis on standardisation, automation, and security.

About the role

As an Axiomatics Senior Developer, you will be a senior technical contributor delivering policy-driven authorisation using Axiomatics. You will work closely with the Technical Lead to implement, test and integrate ABAC policies across applications and services.

What you’ll be responsible for

• Developing and maintaining authorisation policies using ALFA and/or XACML.

• Implementing and configuring Axiomatics PDPs and integrating them with PEPs.

• Designing and implementing attribute resolution via PIPs.

• Integrating Axiomatics with applications, APIs and gateways.

• Implementing automated policy testing, tracing and validation.

• Supporting CI/CD pipelines for policy deployment.

• Performing peer reviews of policy code and configuration.

• Supporting defect triage and optimisation of policy evaluation.

What we’re looking for

• 4–6+ years’ experience in security engineering, IAM or backend platform roles.

• 3+ years’ hands-on experience with Axiomatics, XACML or ABAC frameworks.

• Strong understanding of policy evaluation models and attribute-based decisions.

• Experience integrating authorisation engines with applications or APIs.

• Role level requirement: Degree or equiv exp

• Role level requirement: Technical expertise

• Role level requirement: Some supervision

Technology keywords

Axiomatics, ALFA, XACML, ABAC, PDP, PEP, PIP, Authorisation Policies, APIs, Gateways, Policy Testing, CI/CD

Security clearance

Current Australian Government Baseline security clearance required. NV1 preferred. Demonstrated interest and willingness to obtain NV2 is highly regarded.