Identity and Access Management Specialist

About the role

This role supports the creation of IAM policies, procedures and standards, and designs and implements IAM structures aligned with the organization's security strategy. It covers the full user identity lifecycle, automated onboarding and offboarding, RBAC, MFA, privileged access management and access reviews, including adaptation of IAM controls to OT systems.

Key responsibilities

• Create IAM policies, procedures and standards, and design IAM structures aligned with the security strategy
• Manage the user identity lifecycle (creation, modification, deactivation, deletion)
• Develop and run automated IAM processes for onboarding, role changes and offboarding
• Establish and regularly review Role-Based Access Control (RBAC) structures
• Implement AI-powered identity authentication solutions
• Manage access requests through a centralized platform with approved workflows
• Integrate IAM solutions with AD, LDAP, ERP, email, cloud and production systems
• Deploy and maintain Multi-Factor Authentication (MFA) solutions
• Manage Privileged Access Management (PAM), monitor sessions and restrict access to critical systems
• Conduct regular access reviews, analyze excess privileges, conflicts of interest and inactive accounts
• Prepare IAM audit reports for compliance purposes
• Adapt IAM processes to OT systems and work with OT security teams to align controls across IT and OT
• Develop training on identity protection, password management, MFA and access awareness, and run awareness campaigns with business units

Required profile

• Bachelor's degree in Computer Science, Information Security or a related field
• Minimum 5 years of experience in IAM or cybersecurity roles
• Ability to analyze access control risks such as privilege creep, orphaned accounts and segregation of duties
• Experience preparing reports for internal and external audits and compliance requirements
• Excellent problem-solving skills, a security-first mindset, strong communication and collaboration skills, and ability to deliver user training

Required skills

• Strong knowledge of IAM, RBAC, PAM and MFA
• Hands-on experience with IAM tools such as Active Directory, LDAP, Azure AD, Okta, SailPoint and CyberArk
• Experience integrating IAM with enterprise systems (ERP, email, cloud platforms)
• Familiarity with AI-powered authentication and automation tools is a plus
• Understanding of OT environments and IT/OT convergence
• Certifications such as CISSP, CISM or CISA are preferred