IAM Specialist

IAM Specialist

Location: Calgary, Alberta, (Hybrid 4 days onsite)

Hours: 40 hours per week

Overview:

The Cyber - IAM Specialist serves as the IAM subject matter expert across enterprise projects, providing advisory and hands-on support for identity, access management, privileged access, authentication, authorization, and identity integrations. The role ensures project solutions align with IAM standards, cybersecurity policies, regulatory requirements, and access control objectives while identifying risks and supporting mitigation efforts. This position also contributes to access governance, conditional access policy management, automation, and secure onboarding of applications and systems.

Responsibilities:

• Serve as the IAM subject matter expert for enterprise projects, providing both advisory and hands-on technical support across identity, access management, privileged access, authentication, authorization, and cross-application/system identity integration requirements.

• Review project requirements, solution designs, application onboarding approaches, role models, access workflows, and integration patterns to ensure alignment with IAM standards, cybersecurity policies, regulatory requirements, and access control objectives.

• Configure and maintain IAM-related controls in Active Directory and Microsoft Entra ID, including users, groups, roles, enterprise applications, app registrations, service principals, authentication settings, administrative roles, and access assignments.

• Design, create, test, and maintain Microsoft Entra Conditional Access policies to support MFA enforcement, device compliance, location-based controls, guest and service account restrictions, and other risk-based access requirements.

• Develop, review, and maintain scripts and automation, including PowerShell, to support the project such as access reporting, user and group management, role validation, policy analysis, bulk updates, and data cleanup activities.

• Assess proposed access models for appropriate least privilege, segregation of duties, privileged access controls, lifecycle management, approval workflows, and auditability.

• Identify IAM-related risks, control gaps, compliance impacts, and operational dependencies; recommend practical mitigating actions and support resolution with project teams and stakeholders.

• Support the definition, configuration, and validation of access requirements for new applications, systems, integrations, and business processes, including roles, entitlements, groups, privileged access, service accounts, and identity lifecycle events.

• Partner with the Cybersecurity Architecture team, application owners, business stakeholders, project managers, vendors, and technical teams to ensure IAM requirements are incorporated early in project planning and delivered effectively.

• Provide input into testing scope and acceptance criteria for IAM-related capabilities, including access provisioning, deprovisioning, role assignment, privileged access, authentication controls, Conditional Access policies, and access certification readiness.

• Support implementation readiness, documentation, knowledge transfer, operational handover, and post-implementation review to confirm IAM controls are sustainable, supportable, and aligned with enterprise support processes.

Qualifications:

• Hands-on experience with Active Directory, Azure/Entra ID.

• Strong understanding of IAM concepts: authentication, authorization, access governance, RBAC, SoD.

• Familiarity with IAM audit requirements and access certification processes.

• Working knowledge of NIST CSF or similar cybersecurity frameworks.

• Basic scripting or automation experience is an asset.

• Understands IAM security practices and regulatory compliance (e.g. SOX)

• Strong analytical and problem‑solving skills.

• Ability to influence and problem solve with your expertise and negotiate with stakeholders

• Ability to manage multiple priorities in a production environment.

• Clear written and verbal communication skills.

• Understands access risk and controls, actions plans/outcomes and can explain to stakeholders.

• Detail‑oriented with a strong control mindset.

• Experience managing 3rd party vendors

• Advanced knowledge of policy frameworks (NIST, ISO, ISF and others)

• Excellent client management skills interacting and communicating with Business Partners

• Bachelor’s degree in computer science or related field required.

• 7+ Years of professional IT related work experience with at least 5 years working directly in an Identity and Access Management capacity.