Workplace Identity Specialist

Role Overview

The Workplace Identity Specialist – APAC is a hands-on technical role within the Modern Workplace team, accountable for the delivery, operation, and continuous improvement of workforce identity and access services across the APAC region. This role ensures identity platforms and controls enable secure, seamless access to collaboration and productivity services while meeting global security standards and regional operational requirements.

Operating within the Technology Operations model, this role partners closely with regional InfraOps teams, End User Services, Strategy & Transform, Security, and Global Engineering to improve reliability, compliance, and user experience across highly distributed, multi-tenant environments.

Responsibilities

Identity Platform Delivery & Operations

• Deploy, configure, and operate identity services across Microsoft Entra ID (Azure AD), Active Directory, Google Workspace IAM, and Okta in multi-tenant environments.
• Provide operational oversight for workforce identity services, ensuring stability, performance, and availability across diverse markets.
• Support regional tenant consolidations, OpCo integrations, and identity-related aspects of Modern Workplace rollouts and migrations.
• Implement and maintain authentication, authorisation, and access controls including MFA, Conditional Access, SSO, and Zero Trust-aligned policies.
• Integrate collaboration platforms and SaaS applications into the central identity framework in line with global standards.
• Maintain accurate technical documentation, configurations, and operational runbooks.

Identity Governance, Security & Compliance

• Implement and operate identity governance controls including RBAC/ABAC, access reviews, and lifecycle automation.
• Administer Privileged Identity Management (PIM) and Privileged Access Management (PAM) solutions, ensuring least-privilege and just-in-time access.
• Apply global security baselines and identity policies, providing structured feedback where regional constraints or risks exist.
• Monitor identity services, respond to incidents and service requests escalations, and perform root-cause analysis for recurring issues.
• Support audit, risk, and compliance activities by providing evidence, technical input, and remediation actions.

Enablement & Continuous Improvement

• Act as a regional identity subject-matter expert, supporting local teams with complex identity scenarios.
• Bridge global identity strategy and regional execution, ensuring solutions are pragmatic, scalable, and operationally supportable.
• Identify opportunities to simplify, standardise, and automate identity processes to reduce operational overhead.
• Contribute to the design and low-level architecture of future-state identity solutions.
• Proactively plan and execute platform enhancements, upgrades, and technical debt remediation.

Requirements

Core Identity & Directory Expertise

• Strong hands-on experience with Microsoft Entra ID (Azure AD), Active Directory, and Okta.
• Proven experience with Identity Governance, Privileged Identity Management (PIM), and Privileged Access Management (PAM).
• Solid understanding of identity lifecycle automation, directory synchronisation, and federation concepts.

Technical Skills

• Strong experience with Windows Server and enterprise identity platforms.
• Advanced PowerShell scripting skills; experience with automation and API integration (e.g., Microsoft Graph).
• In-depth knowledge of authentication and authorisation standards including MFA, SAML, OAuth, and SCIM.

Professional Experience

• Experience operating in complex, global or regional enterprise environments.
• Exposure to multi-tenant identity platforms and large-scale Modern Workplace transformations.
• Demonstrated ability to work effectively across regional teams, global engineering, and third-party partners.
• Strong discipline in documentation, configuration management, and operational hygiene.
• Good understanding of security best practices, Zero Trust principles, and audit/compliance requirements.

Preferred Qualifications

• Microsoft Certified: Identity and Access Administrator Associate (or equivalent).
• Okta Certified Professional or Administrator.

Benefits

• Passionate, inspired people – A culture designed for extraordinary work.
• Scale and opportunity – Create, influence, and complete projects at an unparalleled industry scale.
• Challenging and stimulating work – Join a group of creative problem solvers tackling unique challenges.