Cybersecurity Analyst, Identity & Access Management

Gibson Energy Inc.; Calgary; On-site; CAD 110,000 - 140,000; Full time

Job summary

Gibson Energy Inc. is seeking a Cybersecurity Analyst for Identity & Access Management at the Calgary Head Office.

The role focuses on securing and monitoring identities and access privileges across enterprise IT environments, with emphasis on Azure Entra ID, Entra ID PIM, and AD integration. You will own lifecycle processes, strengthen authentication controls, and drive zero trust initiatives, while collaborating with cybersecurity, infrastructure, and application teams to align IAM with

Qualifications

• Minimum 5 years in Cybersecurity with focus on Azure/Entra ID
• Experience with Conditional Access Policy, Entra ID and Active Directory
• Knowledge of SSO, MFA, CA, and authentication protocols
• Understanding of identity threats, risk management, monitoring and incident response
• Familiarity with securing non-human identities and AI agent identities
• Ability to design security dashboards, detection rules, and alerts

Responsibilities

• Identity Lifecycle Ownership across Entra ID, AD and Azure
• Identity Security: define controls for user/service/application identities
• AI Agent Identity Security: secure IAM for AI agents
• PAM: own and enhance PAM and Entra ID PIM
• Access Governance: improve provisioning, reviews, entitlements
• Authentication & Access Controls: strengthen MFA, SSO, CA, RBAC
• Security Monitoring & Risk Reduction: reduce excessive permissions
• Automation: simplify and automate IAM processes
• Security Collaboration: work with teams to integrate IAM controls
• Contribute to broader cybersecurity initiatives and operations

Skills

Azure Entra ID

Active Directory

PAM

MFA & SSO

Identity governance

Zero Trust

Security dashboards

Tools

Entra ID PIM

Job description

Select how often (in days) to receive an alert:

Cybersecurity Analyst, Identity & Access Management

Cybersecurity Analyst, Identity & Access Management
Location: Calgary Head Office
Job status: Full Time Permanent
Department: Information Services

Is this position safety sensitive:No

Why Join Gibson?

At Gibson, talent acquisition helps build the workforce behind our goals. In this role, you’ll own high impact searches from field operations to the executive level across Canada and the United States, partnering directly with business leaders with the autonomy to shape how we attract exceptional talent. If you thrive on complex searches, proactive sourcing and delivering results, this is an opportunity to make a meaningful impact.

The Opportunity

The Cybersecurity & IAM Analyst is responsible for managing, securing, and monitoring all types of identities and access privileges across enterprise IT environments. The ideal candidate will have strong knowledge of Microsoft Azure, Microsoft Entra ID, and Active Directory, along with a solid understanding of Privileged Access Management (PAM) solutions, cybersecurity principles, identity governance, risk management, and security best practices.

This role requires a security-focused mindset, with the ability to identify potential access risks, recognize unusual identity-related activities, and contribute to the organization's overall security posture.

What You'll Do

• Identity Lifecycle Ownership: Own, maintain, automate, and redesign identity lifecycle processes across Entra ID, Active Directory, and Azure, covering human and non-human identities.
• Identity Security: Define and improve security controls for user accounts, service accounts, application identities, managed identities, and workload identities.
• AI Agent Identity Security: Develop and implement secure identity and access management practices for AI agents, including authentication, authorization, permissions, and identity lifecycle controls.
• Privileged Access Management (PAM): Own and enhance the existing PAM and Entra ID PIM solution, expand its coverage, and develop new use cases aligned with Zero Trust and least privilege principles.
• Access Governance: Continuously improve access provisioning, role management, access reviews, and entitlement management across cloud and on-premises environments.
• Authentication & Access Controls: Maintain and strengthen MFA, SSO, Conditional Access, RBAC, and privileged access controls.
• Security Monitoring & Risk Reduction: Identify identity-related security gaps, reduce excessive permissions, and improve visibility into privileged and high-risk access.
• Automation & Continuous Improvement: Identify opportunities to simplify, standardize, and automate IAM processes while improving security and operational efficiency.
• Security Collaboration: Work with cybersecurity, infrastructure, and application teams to integrate identity security controls into new technologies and business initiatives.
• Contribute to broader cybersecurity initiatives and operational tasks as needed, supporting the team's evolving priorities and security objectives.

What You'll Bring (Required)

• Minimum 5 years of Cybersecurity experience with at least 3 of those years focused on Azure and Entra ID.
• Strong hands-on experience with Conditional Access Policy, Microsoft Entra ID, Active Directory, and Azure, including identity lifecycle management, authentication, and access controls.
• Knowledge of SSO, MFA, Conditional Access, and authentication protocols such as SAML, OAuth 2.0, and OpenID Connect.
• Understanding of cybersecurity fundamentals, identity-related threats, risk management, security monitoring, and incident response.
• Familiarity with securing non-human identities, including service principals, managed identities, and emerging AI agent identity security concepts.
• Ability to design and build custom security dashboards, detection rules, and alerts to improve visibility into identity-related threats and suspicious activities.

Knowledge Considered an Asset

• Knowledge and understanding of Information Technology and Operational Technology.
• Strong understanding of security frameworks and models such as NIST, CIS, and Purdue Model.
• Experience developing and implementing security policies and procedures.
• Certified in Cybersecurity (CISSP, CISM, etc.) or have Microsoft Security certifications.

Working Conditions

• Availability for after-hours and on-call work as needed and willingness to provide technical support back-up when required.
• Calgary Head Office based position with occasional field travel.
• This job is subject to background checks as outlined in Gibson Energy’s Background Checks policy. Background checks may include: employment history verification, reference checks, education and/or credentials verification, credit check and a criminal history check.

What We Offer

• Competitive base salary, short-term and long-term incentives, comprehensive benefits, a savings plan, share purchase opportunities and support for professional development and certification, with a company recognized as one of Canada’s Top 100 Employers.