2 Senior Infrastructure Cloud Engineers

⁠⁠⁠Overview

The Department of Finance (ACT) is seeking two Senior Infrastructure Cloud Engineers to assess, design, configure and support the infrastructure, platform and cloud dependencies required for the Identity and Access Management Modernisation (IAMM) project.

About

The IAMM project will modernise Finance's identity and access management capabilities and transition from legacy Microsoft Identity Manager (MIM) and Active Directory Federation Services (AD FS) arrangements to a supported, cloud-ready architecture in which Microsoft Entra ID is Finance's primary identity directory and modern identity platform. SAP HR remains the authoritative source of workforce attributes. Downstream on-premises Active Directory accounts and services will be retained only where required for legacy dependencies, prior to MIM reaching end of extended support on 9 January 2029.

Purpose

The project supports Finance's ICT and Digital Strategy, Cyber Security Strategy, 10-Year ICT Roadmap and Infrastructure Modernisation Program.

Objectives

The project will:

• Establish Microsoft Entra ID as Finance's primary identity directory and modern identity platform
• Reduce reliance on MIM, AD FS and other legacy identity technologies
• Strengthen cyber security through modern authentication, Conditional Access, phishing-resistant MFA, Identity Protection and identity governance capabilities
• Integrate authoritative workforce identity sources and automate Joiner-Mover-Leaver processes
• Migrate supported applications from AD FS to Microsoft Entra ID and Single Sign-On
• Improve privileged access, access reviews, entitlement management, group governance, audit and reporting
• Provide supported, sustainable operating arrangements, documentation, training and knowledge transfer
• Support the Secure Access Service Edge (SASE), Laptop Refresh and Finance's broader move towards cloud services and Zero Trust architecture

Note: SASE is being delivered by a concurrent multi-year program and will modernise how users securely access Finance systems and services, moving from traditional network-based access controls to an identity-centric, Zero Trust model.

The Role

The roles will work across Microsoft Entra ID, Active Directory, AD Federated Services, servers, networking, endpoints, virtual desktops, remote access, monitoring, non-production environments and managed services to ensure identity changes are secure, resilient, supportable and operationally ready.

Instructions to Tenderers

The Department of Finance will not consider or invite additional sellers to this RFQ. Unsolicited emails and requests will not be answered.