IAM Engineer - CIAM

Job description

The IAM Engineer – Customer Identity and Access Management (CIAM) is responsible for the hands-on design, development, automation and operational support of TAL’s customer identity services built on Okta. The role applies SecDevOps practices, including coding, automation, CI/CD and infrastructure as code, to deliver reliable and seamless identity capabilities across digital platforms, cloud environments and third-party services. Working closely with the IAM Engineering Lead, the role identifies control gaps, develops automated solutions and drives continuous improvement to ensure customer identity services remain secure, sustainable and aligned with business, customer experience and regulatory requirements. In this role you will: Build and support CIAM services: Design, configure and support TAL’s Customer Identity and Access Management capabilities, including Okta, across customer registration, authentication, account recovery and identity lifecycle journeys. Engineer secure identity solutions: Develop and maintain secure application, API and partner integrations, applying authentication, authorisation, federation and Zero Trust principles. Drive automation and engineering excellence: Build automation, CI/CD pipelines and infrastructure as code using tools such as Terraform to improve efficiency, consistency and reliability. Strengthen identity security and controls: Assess and improve customer identity controls to protect customer information, reduce fraud and account takeover risk, and address control deficiencies and audit findings. Optimise and continuously improve CIAM: Diagnose complex technical issues, enhance Okta security capabilities and work across Security, Risk, Digital and Technology teams to improve the security, reliability and customer experience of CIAM services. 3+ years’ experience in Identity and Access Management, Customer Identity and Access Management, or Cyber Security engineering, ideally within a customer-focused environment. Hands-on experience with Okta or an equivalent CIAM platform, including authentication, customer identity lifecycle management and modern identity security capabilities. Strong knowledge of identity and authentication standards, including OAuth 2.0, OpenID Connect, SAML, multi-factor authentication and Zero Trust principles. Strong coding and automation capability, using languages such as Python, JavaScript/TypeScript or Java, with experience building APIs, integrations and identity automation. Experience with modern SecDevOps practices, including CI/CD pipelines, infrastructure as code such as Terraform, Git-based version control and automated testing. We will be upgrading the way you apply for jobs at TAL and therefore our job ads will be temporarily unavailable from 5pm Friday 23rd October until 9am Monday 26 October 2026. All job application deadlines will be extended to ensure you have ample time to apply. We look forward to seeing your application . TAL is one of Australia’s leading life insurers, committed to inclusion, and supporting the career growth of our diverse workforce. We’re proud to be: An Inclusive Employer – Recognised as Employer of Choice for Gender Equality by the Workplace Gender Equality Agency and Bronze Tier Status within the Australian Workplace Equality Index Diversity Champions – Member of Diversity Council Australia, Australian Disability Network, Pride in Diversity and Champions of Change Reconciliation Advocates – Read our Innovate Reconciliation Action Plan . We welcome applications from people with diverse experiences, perspectives and backgrounds including Aboriginal and Torres Strait Islander people, caregivers, individuals living with disabilities, people from culturally diverse backgrounds and the LGBTIQ+ community. Need adjustments during the recruitment process? Let our team know by getting in touch with us here —we’re here to support you. You’re always accountable for your actions. You never give up. You strive to find the best outcomes for customers and partners. And you value working together to find the best solutions for problems. As part of the recruitment process, there are several checks which may be conducted to demonstrate your eligibility for a role at TAL including Criminal History, Bankruptcy, Entitlement to Work, Regulatory and Reference Checks. #LI-Hybrid Everyone at TAL has a responsibility to do the right thing and is accountable for the way they conduct themselves. Our expectations are that you follow the principles set out in our Code of Conduct when you come to work every day. Risk management is everyone’s responsibility. If you are already a TAL employee please apply via the SmartRecruiters button in Workday and navigate to the Employee Portal. This is important to ensure that your application is recorded accurately . Join us in shaping the future of the insurance industry, driven by innovation and a 150-year legacy of protecting people Take advantage of well-being initiatives designed to support your mental and physical health, ensuring a balanced lifestyle Enjoy benefits such as discounted insurance, health and well-being programs, and a range of employee benefits to support your lifestyle Welcome to TAL. As a leading life insurer, we’ve been protecting Australians for over 150 years. Backed by Daiichi Life, we're driven by big ambitions and empower to create better products and services. Together with our Partners, we’re helping millions of Australians live a life filled with choices, options, and freedoms. See the direct impact you make delivering support and financial security with care and expertise. Grow beyond expectations with diverse roles, global connections, and exclusive learning opportunities. Work with passionate, bright and capable colleagues. Feel inspired by supportive leaders. Collaborate with heart, where flexibility, wellbeing and inclusivity is valued. Together, we're reimagining insurance. So, bring a curious mind and an ambition to help us become the progressive, digitally enabled leading insurer.