Access Control Administrator; Genetec

Title: Access Control Administrator (Genetec)

Location: Houston, TX - Remote

Employment Type: Contract to Hire

Sector: Energy

We are seeking an experienced Access Control Administrator with Genetec experience to join our growing Identity and Access Management (IAM) team. You will be responsible for the day‑to‑day administration, governance, and operational support of enterprise access control systems, ensuring that the right people have the right access to the right resources at the right time — and only for the right duration.

• Create, modify, and deactivate user accounts, roles, and entitlements across on‑premise and cloud environments
• Implement and maintain Role‑Based Access Control (RBAC), Attribute‑Based Access Control (ABAC), and least‑privilege principles
• Manage joiner/mover/leaver processes (onboarding, transfers, offboarding) in an automated and auditable way
• Administer and support core IAM platforms (Microsoft Entra /Azure AD, Active Directory, Okta, SailPoint Identity Now/IIQ, Saviynt, Ping Identity, Cyber Ark PAM, or similar)
• Configure and troubleshoot Single Sign‑On (SSO), SAML 2.0, OAuth 2.0, OpenID Connect, and SCIM provisioning
• Enforce Multi‑Factor Authentication (MFA) and password policies
• Conduct periodic access reviews, certification campaigns, and remediation of excessive privileges
• Monitor, investigate, and respond to access‑related incidents and audit findings
• Generate reports and metrics on access governance for leadership and auditors
• Collaborate with HR, IT, compliance, and application teams to ensure seamless and secure access lifecycle management
• Participate in IAM projects (cloud migration, Zero Trust initiatives, Privileged Access Management rollout, etc.)
• Maintain up‑to‑date documentation of processes, policies, and system configurations

• 3+ years of hands‑on experience in Identity & Access Management administration
• Strong expertise in at least two of the following platforms:
• Okta or Ping Identity
• SailPoint Identity
  
  IQ or Identity Now
• Saviynt, One Login, or Oracle Identity Governance
• Solid understanding of authentication/authorization protocols (SAML, OIDC, OAuth, Kerberos, LDAP)