Cyber Security Specialist

NES Fircroft is a leading global technical recruitment company providing professional contract and permanent staff to a diverse worldwide client base within the oil & gas industry.

Job Title: IAM Specialist

Length: 1 Year (with potential extension)

Rotation: Monday - Friday

Role Summary

Provides Identity and Access Management (IAM) expertise across enterprise projects, supporting requirements review, solution design, access model validation, privileged access considerations, and identity integration activities. Acts as a subject matter expert to ensure project solutions align with IAM standards, cybersecurity policies, regulatory requirements, and access control objectives. Identifies IAM-related risks, control gaps, and compliance impacts while recommending practical mitigation strategies and supporting successful project delivery.

Key Responsibilities

• Serve as the IAM subject matter expert for enterprise projects, providing both advisory and hands-on technical support across identity, access management, privileged access, authentication, authorization, and cross-application/system identity integration requirements.
• Review project requirements, solution designs, application onboarding approaches, role models, access workflows, and integration patterns to ensure alignment with IAM standards, cybersecurity policies, regulatory requirements, and access control objectives.
• Configure and maintain IAM-related controls in Active Directory and Microsoft Entra , including users, groups, roles, enterprise applications, app registrations, service principals, authentication settings, administrative roles, and access assignments.
• Design, create, test, and maintain Microsoft Entra Conditional Access policies supporting MFA enforcement, device compliance, location-based controls, guest and service account restrictions, and other risk-based access requirements.
• Develop, review, and maintain automation and scripting solutions, including Power Shell, to support access reporting, user and group management, role validation, policy analysis, bulk updates, and data remediation activities.
• Assess access models for least privilege, segregation of duties (SoD), privileged access controls, lifecycle management, approval workflows, and auditability requirements.
• Identify IAM-related risks, control gaps, compliance impacts, and operational dependencies; recommend mitigation strategies and support issue resolution with project teams and stakeholders.
• Support the definition, configuration, and validation of access requirements for applications, systems, integrations, and business processes, including roles, entitlements, groups, privileged access, service accounts, and identity lifecycle events.
• Partner with Cybersecurity Architecture teams, application owners, business stakeholders, project managers, vendors, and technical teams to ensure IAM requirements are incorporated early into project planning and implementation.
• Provide input into testing scope and acceptance criteria for IAM-related capabilities, including provisioning, deprovisioning, role assignment, privileged access, authentication controls, Conditional Access policies, and certification readiness.
• Support implementation readiness activities, documentation, knowledge transfer, operational handover, and post-implementation reviews to ensure IAM controls remain sustainable and supportable.

Role Scope

• Ensures project solutions comply with IAM standards, cybersecurity policies, regulatory requirements, and enterprise access control objectives.
• Provides IAM leadership and guidance throughout project life cycles, from requirements gathering through implementation and operational transition.
• Supports risk management, control validation, audit readiness, and compliance initiatives.
• Improves identity security posture through effective access governance, privileged access management, and automation.
• Influences project teams and business stakeholders on IAM-related design, security, and operational decisions.

Qualifications

• Hands-on experience with Active Directory and Microsoft Entra  (Azure AD).
• Strong understanding of IAM principles, including authentication, authorization, access governance, role-based access control (RBAC), and segregation of duties (SoD).
• Familiarity with access certification processes, IAM audits, and compliance requirements.
• Working knowledge of cybersecurity frameworks such as NIST CSF and industry best practices.
• Experience with Power Shell scripting or automation tools considered an asset.
• Understanding of IAM security controls and regulatory compliance requirements, including SOX.

Professional Skills

• Strong analytical, troubleshooting, and problem-solving capabilities.
• Ability to influence stakeholders and provide guidance through technical expertise and effective negotiation.
• Demonstrated ability to manage multiple priorities in a dynamic environment.
• Excellent written and verbal communication skills.
• Ability to assess access risks, recommend corrective actions, and clearly communicate…