Tech Lead(Cyber Security IAM)

At Aristocrat, we are dedicated to crafting innovative solutions in gaming. We are growing our team with an outstanding opportunity. We seek a hardworking and experienced Tech Lead (Cyber Security IAM) to join our dynamic IT team. This role ensures the security and integrity of our systems. It is crucial to our mission of bringing happiness to life by means of play. Join us and contribute your expertise in a collaborative environment where you will make a significant impact!

• Architect and manage Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integrations with tools like Okta, Ping Identity, and Microsoft Entra ID.
• Build and maintain the Joiner, Mover, Leaver lifecycle processes, automating provisioning and de-provisioning workflows for seamless Day 1 access and immediate revocation upon termination.
• Manage enterprise PAM solutions such as CyberArk, BeyondTrust, and Thycotic to secure high-value credentials.
• Maintain the integrity and hygiene of Active Directory (AD) and Entra ID (Azure AD), supervising Group Policy Objects (GPO) and applying Conditional Access Policies according to risk.
• Implement passwordless authentication solutions (FIDO2, Windows Hello for Business) and drive the migration of legacy applications to modern authentication standards (SAML, OIDC, OAuth).
• Conduct periodic access reviews and recertifications to meet compliance audits (SOX, ISO 27001).
• Implement and manage Identity Governance & Administration (IGA) platforms like SailPoint, Saviynt, Oracle, and Azure Identity Governance.
• Maintain Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) frameworks, ensuring a least-privilege access build.
• Monitor IAM logs to detect anomalous behavior and blocking issues, configuring and investigating identity-based attacks.
• Implement identity controls across Azure, AWS, and GCP, including IAM roles, policies, least-privilege access, conditional access, identity protection, workload identities/service principals, and key rotation.

• 5+ years of experience in Cybersecurity specializing in IAM/PAM.
• Extensive expertise in Active Directory (On-prem) and Azure AD/Entra ID.
• Hands-on experience with IGA tools (e.g., SailPoint, Saviynt) and PAM tools (e.g., CyberArk).
• Deep understanding of federation protocols: SAML 2.0, OAuth 2.0, OIDC, SCIM.
• Strong proficiency in PowerShell or Python for automating IAM tasks and querying APIs.
• Ability to develop "Least Privilege" models and Role-Based Access Control (RBAC) frameworks.
• Certifications such as CEH, CISSP, CIAM, or vendor-specific certifications (e.g., CyberArk Defender/Sentry, Okta Certified Consultant).
• Experience managing machine identities and secrets in DevOps pipelines.
• Experience consolidating AD forests or migrating from on-prem to cloud identity.

Why Aristocrat?

Aristocrat is a world leader in gaming content and technology, and a top-tier publisher of free-to-play mobile games. We deliver great performance for our B2B customers and bring joy to the lives of the millions of people who love to play our casino and mobile games. And while we focus on fun, we never forget our responsibilities. We strive to lead the way in responsible gameplay, and to lift the bar in company governance, employee wellbeing and sustainability. We’re a diverse business united by shared values and an inspiring mission to bring joy to life through the power of play.

We aim to create an environment where individual differences are valued, and all employees have the opportunity to realize their potential. We welcome and encourage applications from all people regardless of age, gender, race, ethnicity, cultural background, disability status or LGBTQ+ identity. EEO M/F/D/V

• World Leader in Gaming Entertainment

• Robust benefits package

• Global career opportunities

Our Values

• All about the Player

• Talent Unleashed

• Collective Brilliance

• Good Business Good Citizen

Travel Expectations

Additional Information

At this time, we are unable to sponsor work visas for this position. Candidates must be authorized to work in the job posting location for this position on a full-time basis without the need for current or future visa sponsorship.