Cybersecurity IAM Engineer

Location: Av. Hidalgo #2404, Colonia Obispado (Torre TOP), Monterrey, Nuevo León, Mexico.

Schedule: Monday to Friday, 7:00 a.m. – 4:00 p.m.

Work Model: Hybrid (3 days onsite / 2 days remote).

We are seeking a Cybersecurity IAM Engineer to design, implement, and optimize identity and access solutions across our global infrastructure. This role plays a key part in securing user and system identities across Okta, Azure AD, Active Directory, and AWS IAM, enabling secure digital operations while enforcing Zero Trust and least privilege at scale.
As an IAM Engineer, you'll go beyond processing tickets—you'll build automations, optimize SSO and federation integrations, enforce policy controls through scripting, and work with cross-functional teams to secure identity lifecycles across IT and OT environments. Come and join a great team who are driving tomorrow’s cybersecurity.

Qualifications

• 3+ Year of hands on experience with IAM Admin.
• Possess strong communications and interpersonal skills in English
• Self-directed, organized, and able to manage multiple priorities
• Strong ability to work collaboratively with others, to influence based on knowledge and experience
• Strong experience with one or more of the following identity platforms: Okta, Azure AD/Entra, Active Directory
• Hands-on knowledge of authentication standards: SAML, OAuth, OIDC, WS-Federation and SSO implementation/support
• Experience with identity lifecycle automation, group policy management, and access governance tooling
• Working knowledge of federated identity, MFA, conditional access, and directory sync processes

Preferred Qualifications

• Experience with the administration of Active Directory and related technologies (GPO, PKI, DNS, etc)
• Experience with the administration of identity governance (IGA) and privileged access (PAM) solutions
• Proficiency in scripting or automation (e.g., PowerShell, Python, Bash)
• Proficiency in SQL
• Familiarity with compliance frameworks such as NIST CSF, ISO 27001, CIS Controls, or SOX
• Familiarity with AI or LLM tooling for identity analytics, automation, or anomaly detection
• Okta Administrator or Consultant Certification
• Active Directory Certifications (AZ-802, ADDS Applied Skills)

Why NOV?

• Build identity security controls at global scale for a diversified energy and technology leader
• Be part of a security team driving Zero Trust transformation across IT and OT
• Use modern IAM platforms with the freedom to innovate and automate

• Hybrid work model (3 days onsite / 2 days remote).

• Monday to Friday schedule (7:00 a.m. – 4:00 p.m.).

• Permanent employment from day one.

• Major Medical Insurance.

• Minor Medical Insurance.

• Funeral Expense Insurance.

• Life Insurance.

• Savings Fund.

• 30 days of Christmas bonus (Aguinaldo).

• Vacation in accordance with Mexican labor law.

• Biweekly payroll.

Responsibilities

• Design, implement, and maintain IAM solutions across Okta, Azure AD, Active Directory, and AWS IAM
• Integrate and manage SSO and MFA for cloud and on-prem applications using SAML, OAuth, WS-Federation, and SCIM
• Automate identity workflows, group assignments, access revocations, and certification campaigns using tools like PowerShell, Python, or Okta Workflows
• Enforce access controls aligned to Zero Trust, RBAC, and JML (Joiner-Mover-Leaver) lifecycle policies
• Harden IAM configurations in hybrid environments (e.g., password policies, conditional access, privileged account handling)
• Participate in the evaluation and integration of IAM-related technologies and security enhancements
• Collaborate with IT, cloud, HRIS, and security engineering teams to embed identity governance in enterprise systems
• Assist with privileged access management (PAM), identity federation design, and directory service integrations
• Support audit and compliance efforts by maintaining evidence, resolving control gaps, and improving access visibility
• Other duties as assigned by organization leadership