Hybrid Cybersecurity IAM Engineer

at NOV

• Job title: Cybersecurity IAM Engineer
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: AWS, Azure, Cloud, Python
• Location requirements: Hybrid, Monterrey, Mexico

About the role

• Cybersecurity IAM Engineer tasked with securing identities across various platforms. Implementing and maintaining IAM solutions to support Zero Trust and secure operations.

Responsibilities

• Design, implement, and maintain IAM solutions across Okta, Azure AD, Active Directory, and AWS IAM
• Integrate and manage SSO and MFA for cloud and on-prem applications using SAML, OAuth, WS-Federation, and SCIM
• Automate identity workflows, group assignments, access revocations, and certification campaigns using tools like PowerShell, Python, or Okta Workflows
• Enforce access controls aligned to Zero Trust, RBAC, and JML (Joiner-Mover-Leaver) lifecycle policies
• Harden IAM configurations in hybrid environments (e.g., password policies, conditional access, privileged account handling)
• Participate in the evaluation and integration of IAM-related technologies and security enhancements
• Collaborate with IT, cloud, HRIS, and security engineering teams to embed identity governance in enterprise systems
• Assist with privileged access management (PAM), identity federation design, and directory service integrations
• Support audit and compliance efforts by maintaining evidence, resolving control gaps, and improving access visibility
• Other duties as assigned by organization leadership

Requirements

• Possess strong communications and interpersonal skills in English
• Self-directed, organized, and able to manage multiple priorities
• Strong ability to work collaboratively with others, to influence based on knowledge and experience
• Strong experience with identity platforms: Okta, Azure AD, Active Directory, AWS IAM
• Hands-on knowledge of authentication standards: SAML, OAuth, OIDC, WS-Federation
• Proficiency in scripting or automation (e.g., PowerShell, Python, Bash)
• Experience with identity lifecycle automation, group policy management, and access governance tooling
• Working knowledge of federated identity, MFA, conditional access, and directory sync processes
• Familiarity with IAM-related components of frameworks like NIST CSF, ISO 27001, and CIS Controls
• Certifications: Okta, Azure, CompTIA Security+, or similar
• Experience with identity governance platforms
• Familiarity with compliance frameworks such as NIST CSF, ISO 27001, CIS Controls, or SOX
• Experience with identity governance platforms and PAM solutions
• Familiarity with AI or LLM tooling for identity analytics, automation, or anomaly detection

Benefits

• Build identity security controls at global scale for a diversified energy and technology leader
• Be part of a security team driving Zero Trust transformation across IT and OT
• Use modern IAM platforms with the freedom to innovate and automate