Senior Infrastructure Engineer

The AEC is seeking an experienced Senior B2C Engineer to manage and improve our system infrastructure including on-premises server and storage systems, multi-cloud infrastructure, Office 365 applications, AEC’s standard operating environments, and end user device management.  They will work within the Funding and Disclosure Reform Program and will assist the team to deliver positive outcomes for the program relating to the management and development of the program’s infrastructure and systems. Key duties and responsibilities The Senior B2C Engineer will be responsible for, but not limited to: Work effectively across multidisciplinary teams to provide specialist expertise in Azure AD B2C and eIDAM architecture, contributing to the design, development, implementation and continuous improvement of identity and access management solutions in line with business requirements and architectural standards. Develop, maintain and document detailed technical designs, specifications and solution artefacts for B2C components, ensuring alignment with enterprise architecture, cybersecurity requirements and Technology Uplift objectives. Translate strategic architectural direction provided by Solution Architects into detailed, implementable solution designs that define the configuration, operation and integration of Azure AD B2C and eIDAM capabilities across the AEC. Produce and maintain high-quality technical documentation, including System Architecture Documents (SADs), detailed design specifications, technical patterns, implementation guidance and supporting artefacts to enable successful solution delivery. Develop and maintain business and technical process models that support end-to-end identity and access management capabilities and can be applied consistently across the organisation. Work collaboratively with solution architects, delivery teams and stakeholders to ensure technical designs are fit for purpose, align with governance requirements and support successful implementation outcomes. Maintain and continually improve the documented B2C technical approach, ensuring architectural decisions, design patterns and technical guidance remain accurate, current and aligned to organisational priorities. Provide detailed implementation guidance to engineering and delivery teams, supporting the build, deployment, testing and operationalisation of identity and access management solutions. Ensure deadlines are consistently met and that technical design documentation is delivered to a high standard, supporting effective governance, decision-making and solution delivery. Work as part of Agile delivery teams, contributing specialist expertise to support successful project and operational outcomes. Perform additional duties or assume responsibility for functions as directed by the Director, Team Leader or Solution Architect from time to time. Criteria The buyer has specified that each candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters. Essential criteria 1. • Extensive Azure AD B2C Custom Policy expertise, including Trust Framework design, policy development, claims transformations, user journeys, REST integrations, federation, Relying Party policies, troubleshooting, and optimisation. • Extensive Trust Framework and Relying Party experience, including modification and rationalisation of policy hierarchies, token issuance, claims mapping, custom technical profiles, and implementation of reusable design patterns. • Strong identity and security protocol expertise, including OAuth 2.0, OpenID Connect (OIDC), JWT tokens, claims-based authorisation, API security, federation security controls, token lifecycle management, and secure authentication and authorisation practices. • B2C cleanup and uplift experience, including technical debt remediation, policy and user journey consolidation, inheritance simplification, governance establishment, and security control enhancement. • Proven ability to identify, analyse and resolve system design weaknesses, troubleshoot and manage the resolution of issues related identities, systems, access, accounts, authentication, authorization, entitlements, and permissions. 2. • Experience with GIT version control and common branching strategies. • Well-developed written and verbal communication skills and demonstrated ability to engage with a variety of internal and external stakeholders including non-technical senior managers. • Proven ability to collaborate with multi-disciplinary teams of business, technology, external suppliers and other subject-matter experts. • Must have an Active AGSVA Negative Vetting 1 level clearance. 3. • Your submission must include 1 PDF attachment with no more than 5 pages, containing all requested information below. (Only 1 PDF should be uploaded per submission.) • Candidate availability to commence (e.g. 2 weeks' notice) • Confirmation that Australian Citizenship is held - proof may be requested • Current Security Clearance held • Candidate location • Notice of planned leave exceeding one week • Notice of whether the submitted candidate will also be engaged in secondary employment elsewhere (if so, please confirm in what capacity) • Consultant comments - no more than 500 words, speaking to the suitability of the submitted candidate for the position • Cover page responding to the mandatory criteria - please ensure this response does not exceed 1 page in length • Candidate resume - please ensure the candidate's resume is no more than 3 pages, and that you do not include any rate information within this document Desirable criteria 1. • Relevant qualifications in IT, including cloud certification • Demonstrated knowledge of IT frameworks, such as ITIL and TOGAF • Demonstrated knowledge of the Commonwealth frameworks, including ICT frameworks Opportunity summary Sellers can submit Up to 2 candidates Number of sellers invited More than 10 Number of candidates submitted Fewer than 10 RFQ closing time 02 Weeks 01 Days 12 Hours Send us feedback About Accessibility Privacy Terms of use Disclaimer and copyright An initiative of the Digital Transformation Agency The Australian Government acknowledges the Traditional Owners of Country throughout Australia and acknowledges their continuing connection to land, waters and community. We pay our respects to the people, the cultures and the Elders past and present. © Commonwealth of Australia