Information and Communications Technology (ICT) Officer (Identity and Access Management) (P)

IOM; Valencia; On-site; EUR 70,000 - 90,000; Full time

Job summary

IOM in Valencia region is seeking an ICT Officer (Identity and Access Management) to lead and evolve the IDAM ecosystem. You will design, implement, and support identity orchestration using One Identity - Identity Manager, integrating with AD, Entra ID, and Oracle ERP to ensure secure, least-privilege access.

The role requires 5+ years in IAM, strong scripting skills, and expertise in RBAC/ABAC, SoD controls, and ERP IAM integrations.

Qualifications

• Five years of experience in Identity & Access Management, IT security, or related infrastructure engineering.
• Hands-on experience with One Identity - Identity Manager.
• Proficiency in Microsoft Active Directory and Entra ID (Azure AD).
• Experience integrating IAM with ERP systems for automated provisioning.
• Knowledge of authentication/authorization protocols (SAML, OAuth, OIDC).
• Experience implementing RBAC, ABAC, and SoD controls.
• Strong scripting abilities (PowerShell, SQL).

Responsibilities

• Design, configure, and maintain the One Identity - Identity Manager system for user lifecycle management, provisioning, and RBAC/ABAC controls.
• Integrate identity data from ERP (WAVE) for Joiner/Mover/Leaver processes and synchronize between AD and Entra ID.
• Define and implement access governance, including SoD, access reviews, and automated provisioning workflows.
• Collaborate with HR, Information Security, and Compliance to enforce identity policies and Just-In-Time access.
• Manage AD and Entra ID hybrid identity sync, MFA, and Conditional Access policies.
• Publish and manage SaaS applications for Single Sign-On (SSO).
• Create IAM documentation and supervise the IAM team; contribute to license entitlements.

Skills

Identity & Access Mgmt

PowerShell

SQL

Active Directory

Entra ID / Azure AD

RBAC & ABAC

SAML OAuth OpenID

Automation

Education

Master's degree in cybersecurity / computer science / related field

Bachelor's degree in related field

SC-300 Certified

AZ-104 Certified

ITIL v4 Foundation

CISSP

One Identity - Identity Manager Foundations

Tools

One Identity Manager

Active Directory

Entra ID / Azure AD

Oracle ERP

Job description

Organizational context: Established in 1951, IOM is the leading UN agency for migration, promoting humane and orderly migration globally. The organization works with partners to save lives, protect people on the move, and facilitate pathways for regular migration. The ICT Officer (Identity and Access Management) role sits within the Information and Communications Technology (ICT) department, reporting to the Chief Technology Officer.

Job purpose: The ICT Officer (Identity and Access Management) is responsible for leading and evolving IOM's identity and access management (IDAM) ecosystem. This role acts as the gatekeeper for digital identity, ensuring appropriate access for individuals and devices. Key responsibilities include designing, implementing, and supporting identity orchestration using One Identity - Identity Manager, integrated with Microsoft Active Directory, Azure Active Directory, and Oracle ERP. The position requires expertise in automating access, enforcing least privilege principles, and mitigating identity-related risks to enhance overall security and operational efficiency within the organization.

Responsibilities: Key responsibilities include designing, configuring, and maintaining the One Identity - Identity Manager (IDAM) system for user lifecycle management, provisioning, and role-based access control. This involves integrating identity data from the WAVE ERP system for Joiner/Mover/Leaver (JML) processes and managing synchronization and federation between Microsoft Active Directory and Azure Active Directory (Entra ID). The role also encompasses defining and implementing access governance, including role modeling, segregation of duties (SoD), and access review campaigns, alongside developing automated workflows for account provisioning and deprovisioning. Collaboration with HR, Information Security, and Compliance teams is essential for enforcing identity policies and Just-In-Time (JIT) access. Additionally, the role involves managing Microsoft Active Directory and Entra ID, including hybrid identity sync, entitlement management, and the configuration of Conditional Access Policies and MFA. The ICT Officer will also be responsible for publishing and managing SaaS applications for Single Sign-On (SSO) and building processes to enforce user consent restrictions. Creating and maintaining IAM documentation, supervising the IAM team, and providing input for license entitlements are also key duties.

Education: A Master's degree in Cybersecurity, Computer Engineering, Computer Science, or a related field with five years of relevant experience, or a University degree with seven years of relevant experience. Required certifications include Microsoft Certified: Identity and Access Administrator Associate (SC-300) and Microsoft Certified: Azure Administrator Associate (AZ-104). ITIL v4 Foundation and CISSP certifications must be attained and maintained. One Identity - Identity Manager Foundations and CISSP are considered advantageous.

Work experience: Requires a minimum of 5 years of experience in Identity & Access Management, IT Security, or related infrastructure engineering. Essential experience includes hands-on work with One Identity - Identity Manager, proficiency in Microsoft Active Directory and Azure Active Directory (Entra ID), and experience integrating IAM solutions with ERP systems for automated provisioning. Understanding of authentication/authorization protocols (SAML, OAuth, OpenID Connect) and experience implementing RBAC, ABAC, and SoD controls are also necessary. Strong scripting abilities (PowerShell, SQL) for automation are required.

Skills: Supervision and team training, project management, automation of user lifecycle processes (HR, AD, Entra ID), effective communication with technical and non-technical stakeholders, handling confidential data responsibly, familiarity with global IT security trends and NIST standards, and working knowledge of One Identity Manager, Active Directory, and Entra ID.

Required languages: English

Desired languages: Arabic, French, Russian, Spanish