Cybersecurity Analyst, Indentity & Access Management

Cybersecurity Analyst, Identity & Access Management

Location:

Calgary Head Office
Job status:
Full Time Permanent
Department:
Information Services
Is this position safety sensitive:

No
Why Join Gibson?
At Gibson, talent acquisition helps build the workforce behind our goals. In this role, you’ll own high impact searches from field operations to the executive level across Canada and the United States, partnering directly with business leaders with the autonomy to shape how we attract exceptional talent. If you thrive on complex searches, proactive sourcing and delivering results, this is an opportunity to make a meaningful impact.
The Opportunity
The Cybersecurity & IAM Analyst is responsible for managing, securing, and monitoring all types of identities and access privileges across enterprise IT environments. The ideal candidate will have strong knowledge of Microsoft Azure, Microsoft Entra , and Active Directory, along with a solid understanding of Privileged Access Management (PAM) solutions, cybersecurity principles, identity governance, risk management, and security best practices.
This role requires a security-focused mindset, with the ability to identify potential access risks, recognize unusual identity-related activities, and contribute to the organization's overall security posture.
What You'll Do
Identity Lifecycle Ownership:  Own, maintain, automate, and redesign identity lifecycle processes across Entra , Active Directory, and Azure, covering human and non-human identities.
Identity Security:  Define and improve security controls for user accounts, service accounts, application identities, managed identities, and workload identities.
AI Agent Identity Security:  Develop and implement secure identity and access management practices for AI agents, including authentication, authorization, permissions, and identity lifecycle controls.
Privileged Access Management (PAM):  Own and enhance the existing PAM and Entra  solution, expand its coverage, and develop new use cases aligned with Zero Trust and least privilege principles.
Access Governance:  Continuously improve access provisioning, role management, access reviews, and entitlement management across cloud and on-premises environments.
Authentication & Access Controls:  Maintain and strengthen MFA, SSO, Conditional Access, RBAC, and privileged access controls.
Security Monitoring & Risk Reduction:  Identify identity-related security gaps, reduce excessive permissions, and improve visibility into privileged and high-risk access.
Automation & Continuous Improvement:  Identify opportunities to simplify, standardize, and automate IAM processes while improving security and operational efficiency.
Security

Collaboration:

Work with cybersecurity, infrastructure, and application teams to integrate identity security controls into new technologies and business initiatives.
Contribute  to broader cybersecurity initiatives and operational tasks as needed, supporting the team's evolving priorities and security objectives.
What You'll Bring (Required)
Minimum 5 years of Cybersecurity experience with at least 3 of those years focused on Azure and Entra .
Strong hands‑on experience with Conditional Access Policy, Microsoft Entra , Active Directory, and Azure, including identity lifecycle management, authentication, and access controls.
Knowledge of SSO, MFA, Conditional Access, and authentication protocols such as SAML, OAuth 2.0, and OpenID Connect.
Understanding of cybersecurity fundamentals, identity-related threats, risk management, security monitoring, and incident response.
Familiarity with securing non-human identities, including service principals, managed identities, and emerging AI agent identity security concepts.
Ability to design and build custom security…