Cybersecurity IAM Engineer

NOV; Houston (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

NOV is seeking an IAM Engineer to design and implement secure identity solutions across cloud and on‑prem environments. You’ll automate workflows using PowerShell and Python, and integrate Okta, Azure AD, and AD, helping enforce Zero Trust policies.

You will collaborate with IT, security, and HRIS to mature identity governance, manage SSO/MFA, and support audits. Strong English communication and project-driving ability are essential in this fast-paced cybersecurity team.

Qualifications

• Strong communications and interpersonal skills in English.
• Self-directed, organized, and able to manage multiple priorities.
• Able to collaborate with others and influence based on knowledge and experience.
• Hands-on experience with identity platforms (Okta, Azure AD, Active Directory, AWS IAM).
• Proficiency with authentication standards (SAML, OAuth, OIDC, WS-Federation).
• Scripting/automation experience (PowerShell, Python, Bash).
• Experience with identity lifecycle automation, group policy management, and access governance tooling.
• Familiarity with IAM concepts in NIST CSF, ISO 27001, CIS Controls.

Responsibilities

• Design, implement, and maintain IAM solutions across multiple platforms.
• Integrate and manage SSO and MFA for cloud and on-prem apps using standard protocols.
• Automate identity workflows and access governance processes.
• Enforce access controls in line with Zero Trust, RBAC, and lifecycle policies.
• Harden IAM configurations in hybrid environments.
• Evaluate and integrate IAM technologies and security enhancements.
• Collaborate with IT, cloud, HRIS, and security teams to embed identity governance.
• Support PAM, identity federation design, and directory service integrations.
• Assist audits by maintaining evidence and reducing control gaps.
• Other duties as required by leadership.

Skills

IAM

Okta

Azure AD

Active Directory

AWS IAM

SAML

OAuth

PowerShell

Python

Bash

Zero Trust

RBAC

Tools

PowerShell

Python

Okta Workflows

Bash

Job description

Job Description

As an IAM Engineer, you'll go beyond processing tickets—you'll build automations, optimize SSO and federation integrations, enforce policy controls through scripting, and work with cross-functional teams to secure identity lifecycles across IT and OT environments. Come and join a great team who are driving tomorrow’s cybersecurity.

Responsibilities

• Design, implement, and maintain IAM solutions across Okta, Azure AD, Active Directory, and AWS IAM
• Integrate and manage SSO and MFA for cloud and on-prem applications using SAML, OAuth, WS-Federation, and SCIM
• Automate identity workflows, group assignments, access revocations, and certification campaigns using tools like PowerShell, Python, or Okta Workflows
• Enforce access controls aligned to Zero Trust, RBAC, and JML (Joiner-Mover-Leaver) lifecycle policies
• Harden IAM configurations in hybrid environments (e.g., password policies, conditional access, privileged account handling)
• Participate in the evaluation and integration of IAM-related technologies and security enhancements
• Collaborate with IT, cloud, HRIS, and security engineering teams to embed identity governance in enterprise systems
• Assist with privileged access management (PAM), identity federation design, and directory service integrations
• Support audit and compliance efforts by maintaining evidence, resolving control gaps, and improving access visibility
• Other duties as assigned by organization leadership

Qualifications

• Possess strong communications and interpersonal skills in English
• Self-directed, organized, and able to manage multiple priorities
• Strong ability to work collaboratively with others, to influence based on knowledge and experience
• Strong experience with identity platforms: Okta, Azure AD, Active Directory, AWS IAM
• Hands-on knowledge of authentication standards: SAML, OAuth, OIDC, WS-Federation
• Proficiency in scripting or automation (e.g., PowerShell, Python, Bash)
• Experience with identity lifecycle automation, group policy management, and access governance tooling
• Working knowledge of federated identity, MFA, conditional access, and directory sync processes
• Familiarity with IAM-related components of frameworks like NIST CSF, ISO 27001, and CIS Controls