Lead Technical Business Analyst

DEPARTMENT OF FINANCE WILL NOT CONSIDER OR INVITE ADDITIONAL SELLERS TO THIS RFQ. UNSOLICITED EMAILS AND REQUESTS WILL NOT BE ANSWERED. The Department of Finance (Finance) is seeking a Technical Business Analyst to support the Identity and Access Management Modernisation (IAMM) project.  The Project: The IAMM will modernise Finance’s identity and access management capabilities and transition from legacy Microsoft Identity Manager (MIM) and Active Directory Federation Services (AD FS) arrangements to a supported, cloud-ready architecture in which Microsoft Entra ID is Finance’s primary identity directory and modern identity platform. SAP HR remains the authoritative source of workforce attributes. Downstream on-premises Active Directory accounts and services will be retained only where required for legacy dependencies, prior to MIM reaching end of extended support on 9 January 2029. IAMM supports Finance’s ICT and Digital Strategy, Cyber Security Strategy, 10-Year ICT Roadmap and Infrastructure Modernisation Program. The project will: Establish Microsoft Entra ID as Finance’s primary identity directory and modern identity platform. Reduce reliance on MIM, AD FS and other legacy identity technologies.  Strengthen cyber security through modern authentication, Conditional Access, phishing-resistant MFA, Identity Protection and identity governance capabilities.  Integrate authoritative workforce identity sources and automate Joiner-Mover-Leaver processes. Migrate supported applications from AD FS to Microsoft Entra ID and Single Sign-On. Improve privileged access, access reviews, entitlement management, group governance, audit and reporting. Provide supported, sustainable operating arrangements, documentation, training and knowledge transfer.  Support the Secure Access Service Edge (SASE), Laptop Refresh and Finance’s broader move towards cloud services and Zero Trust architecture. Note: SASE is being delivered by a concurrent multi-year program and will modernise how users securely access Finance systems and services, moving from traditional network-based access controls to an identity-centric, Zero Trust model. Key duties and responsibilities The successful candidate (as Business Analyst) will undertake the following duties and responsibilities:  Plan, facilitate and document interviews, discovery sessions and workshops with business, technical, security, architecture, operational and support stakeholders. Elicit, analyse, document, validate and manage business, user, functional, non-functional, security, privacy, operational, reporting and support requirements. Document current-state and future-state identity lifecycle, Joiner-Mover-Leaver, access request, approval, review, provisioning, deprovisioning, reconciliation and exception processes. Develop process maps, business rules, user stories, use cases, acceptance criteria, requirements traceability and decision records. Identify manual activities, control gaps, duplicated processes, unclear ownership, business impacts and opportunities for automation and standardisation. Support development of the Identity Data Contract, including identity types, authoritative sources, required attributes, lifecycle events, ownership, interfaces, validation and reconciliation requirements. Assist with stakeholder, application, service and dependency inventories, migration-readiness assessments and business prioritisation. Translate business requirements into clear information for solution architects, engineers, testers, cyber security specialists and operational teams. Manage requirements changes and ensure impacts, assumptions, dependencies, decisions and acceptance criteria are understood and approved. Support test planning, UAT, business readiness, communications, training, deployment, hyper-care, operational handover and benefits tracking. Produce complete, accurate and auditable analysis artefacts and maintain them throughout the project lifecycle. Desirable skills and experience of the successful candidate:  Highly Desirable  Minimum five years technical business analysis experience in government or a similarly complex organisation;  Demonstrated experience eliciting, analysing, documenting, validating and managing business, user, functional, non-functional and operational requirements for complex ICT initiatives. Demonstrated experience facilitating discovery workshops and producing process models, business rules, user stories, use cases, acceptance criteria and requirements traceability. Demonstrated ability to analyse identity or workforce data flows, integrations, authoritative sources, business processes, dependencies, controls and operational impacts. Demonstrated ability to translate business needs into clear requirements and work effectively with architects, engineers, testers, cyber security specialists and senior business stakeholders. Demonstrated experience supporting UAT, business readiness, communications, training, implementation and transition to business-as-usual arrangements. Desirable Criteria  Experience with business architecture, service design or roadmap development in a large or government organisation. Relevant technical business analysis certification and experience providing knowledge transfer within a blended delivery team. Experience supporting identity and access management, cyber security or enterprise technology modernisation initiatives.  Experience working within Australian Government environments and applying Commonwealth security, privacy and governance requirements. Evaluation Notes:  Candidates are encouraged to explicitly address desirable skills and experience in their RFQ response, demonstrating their possession of these traits. The “evaluation criteria” later detailed in the RFQ (understanding, capacity & capability, risk, price) represents the broader criteria adopted by the Buyer when assessing a Seller’s response for Value for Money. Criteria The buyer has specified that each candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters. Essential criteria 1. Labour Hire Workers and Supplier Personnel MUST include in their response to the RFQ any potential conflicts of interest which may arise in performing duties during the term of the Contract. This includes (but is not limited to): owning interests and/or ongoing employment with ICT businesses who deliver services to the Commonwealth; have vested interests in ICT technologies; have l relationships with Buyer personnel involved in the Contract’s scope. Response to this question does not count towards a candidate’s word/page limit. Desirable criteria 1. All Candidates with respect to their Seller will be evaluated against the evaluation criterion listed in this “Desirable Criteria” section. The evaluation criteria are unweighted. Evaluation Criterion 1: The extent to which a candidate & seller demonstrates an understanding and appreciation of the Requirements (Role description + Key duties and responsibilities + Technical Skills). 2. Evaluation Criterion 2: The extent to which a candidate & seller demonstrates the capacity, capability, and experience to fulfil the Requirements (Role description + Key duties and responsibilities + Technical Skills) to a high standard and within any specified timeframes. * The Buyer will consider potential onboarding delays and impacts to timeframes if candidates do not possess a current security clearance. * The Buyer will consider non-compliance with details of the Working Arrangement. 3. Evaluation Criterion 3: The risk associated with a candidate and/or seller. Including (but not limited to) those identified during interviews; referee reports; non-compliance with contract terms and conditions; financial viability risks; conflicts of interest; and any other due diligence checks considered by the Buyer 4. Evaluation Criterion 4: The pricing and whole-of-life costs associated with a candidate and/or seller. Opportunity summary Sellers can submit Up to 2 candidates Number of sellers invited Between 5 and 10 Number of candidates submitted Fewer than 10 Send us feedback About Accessibility Privacy Terms of use Disclaimer and copyright An initiative of the Digital Transformation Agency The Australian Government acknowledges the Traditional Owners of Country throughout Australia and acknowledges their continuing connection to land, waters and community. We pay our respects to the people, the cultures and the Elders past and present. © Commonwealth of Australia