Cybersecurity Analyst, Indentity & Access Management

Gibson Energy; Calgary; On-site; CAD 95,000 - 140,000; Full time

Benefits offered by this job

Competitive base salary

Incentives

Comprehensive benefits

Professional development

Share purchase opportunities

Job summary

Gibson Energy in Calgary seeks an experienced Cybersecurity Analyst focusing on Identity & Access Management. You will own identity lifecycle, security controls and PAM across Azure Entra ID and Active Directory, including AI agent identities and zero-trust use cases.

The role demands strong knowledge of SSO/MFA, CA, RBAC and governance, with collaboration across cybersecurity, infrastructure and application teams to strengthen the organization’s security posture.

Qualifications

• 5+ years of cybersecurity experience with at least 3 years on Azure and Entra ID.
• Strong hands-on with Conditional Access, Entra ID, AD, and Azure identity lifecycle.
• Knowledge of SSO, MFA, CA and authentication protocols (SAML, OAuth 2.0, OpenID).
• Understanding of security fundamentals, identity threats, risk monitoring and incident response.
• Familiarity with securing non-human identities (service principals, managed identities).

Responsibilities

• Own identity lifecycle across Entra ID, AD and Azure for human and non-human identities.
• Define security controls for user, service, application, and workload identities.
• Develop secure identity for AI agents including authentication and authorization.
• Manage PAM and Entra ID PIM, expand coverage and create new use cases (Zero Trust).
• Improve access provisioning, role management and access reviews across cloud/on‑prem.
• Strengthen MFA, SSO, Conditional Access, RBAC and privileged access controls.
• Identify identity security gaps and reduce excessive permissions.
• Automate IAM processes to improve security and operations.
• Collaborate with cybersecurity, infra and apps teams to integrate controls.

Skills

Azure Entra ID

Active Directory

SSO MFA

Identity lifecycle

Tools

Microsoft Entra ID

Azure

PAM tools

Job description

Cybersecurity Analyst, Identity & Access Management
Location: Calgary Head Office
Job status: Full Time Permanent
Department: Information Services

Is this position safety sensitive:No

Why Join Gibson?

At Gibson, talent acquisition helps build the workforce behind our goals. In this role, you’ll own high impact searches from field operations to the executive level across Canada and the United States, partnering directly with business leaders with the autonomy to shape how we attract exceptional talent. If you thrive on complex searches, proactive sourcing and delivering results, this is an opportunity to make a meaningful impact.

The Opportunity

The Cybersecurity & IAM Analyst is responsible for managing, securing, and monitoring all types of identities and access privileges across enterprise IT environments. The ideal candidate will have strong knowledge of Microsoft Azure, Microsoft Entra ID, and Active Directory, along with a solid understanding of Privileged Access Management (PAM) solutions, cybersecurity principles, identity governance, risk management, and security best practices.

This role requires a security-focused mindset, with the ability to identify potential access risks, recognize unusual identity-related activities, and contribute to the organization's overall security posture.

What You'll Do

• Identity Lifecycle Ownership: Own, maintain, automate, and redesign identity lifecycle processes across Entra ID, Active Directory, and Azure, covering human and non-human identities.
• Identity Security: Define and improve security controls for user accounts, service accounts, application identities, managed identities, and workload identities.
• AI Agent Identity Security: Develop and implement secure identity and access management practices for AI agents, including authentication, authorization, permissions, and identity lifecycle controls.
• Privileged Access Management (PAM): Own and enhance the existing PAM and Entra ID PIM solution, expand its coverage, and develop new use cases aligned with Zero Trust and least privilege principles.
• Access Governance: Continuously improve access provisioning, role management, access reviews, and entitlement management across cloud and on-premises environments.
• Authentication & Access Controls: Maintain and strengthen MFA, SSO, Conditional Access, RBAC, and privileged access controls.
• Security Monitoring & Risk Reduction: Identify identity-related security gaps, reduce excessive permissions, and improve visibility into privileged and high-risk access.
• Automation & Continuous Improvement: Identify opportunities to simplify, standardize, and automate IAM processes while improving security and operational efficiency.
• Security Collaboration: Work with cybersecurity, infrastructure, and application teams to integrate identity security controls into new technologies and business initiatives.
• Contribute to broader cybersecurity initiatives and operational tasks as needed, supporting the team's evolving priorities and security objectives.

What You'll Bring (Required)

• Minimum 5 years of Cybersecurity experience with at least 3 of those years focused on Azure and Entra ID.
• Strong hands‑on experience with Conditional Access Policy, Microsoft Entra ID, Active Directory, and Azure, including identity lifecycle management, authentication, and access controls.
• Knowledge of SSO, MFA, Conditional Access, and authentication protocols such as SAML, OAuth 2.0, and OpenID Connect.
• Understanding of cybersecurity fundamentals, identity-related threats, risk management, security monitoring, and incident response.
• Familiarity with securing non-human identities, including service principals, managed identities, and emerging AI agent identity security concepts.
• Ability to design and build custom security dashboards, detection rules, and alerts to improve visibility into identity-related threats and suspicious activities.

Knowledge Considered an Asset

• Knowledge and understanding of Information Technology and Operational Technology.
• Strong understanding of security frameworks and models such as NIST, CIS, and Purdue Model.
• Experience developing and implementing security policies and procedures.
• Certified in Cybersecurity (CISSP, CISM, etc.) or have Microsoft Security certifications.

Working Conditions

• Availability for after‑hours and on‑call work as needed and willingness to provide technical support back‑up when required.
• Calgary Head Office based position with occasional field travel.
• This job is subject to background checks as outlined in Gibson Energy's Background Checks policy. Background checks may include: employment history verification, reference checks, education and/or credentials verification, credit check and a criminal history check.

What We Offer

Competitive base salary, short‑term and long‑term incentives, comprehensive benefits, a savings plan, share purchase opportunities and support for professional development and certification, with a company recognized as one of Canada’s Top 100 Employers.

For more information about who we are and what we do, visit www.gibsonenergy.com.