ICT Officer (Identity and Access Management)

About the role

IOM is looking for an ICT Officer (Identity and Access Management) in Valencia. The officer leads and evolves the identity and access management (IDAM) ecosystem, acting as the gatekeeper of the digital identity landscape so that the right people and devices get the right access at the right time. The role reports to the Chief Technology Officer under the Director of ICT.

Key responsibilities

• Design, configure and maintain One Identity - Identity Manager (IDM) for user lifecycle, provisioning and role-based access control
• Integrate identity data from the WAVE ERP to drive Joiner/Mover/Leaver processes and manage synchronization between Active Directory and Azure Active Directory
• Define access governance, including role modelling, segregation of duties and access reviews, and enforce JIT access for sensitive operations
• Develop automated workflows for provisioning, deprovisioning and entitlement management, and collaborate with HR, Information Security and Compliance
• Monitor identity incidents and service requests, and maintain IAM documentation, architecture diagrams, SOPs and audit records
• Supervise the IAM team and manage performance
• Manage hybrid identity sync, entitlement packages, service accounts, Azure AD roles, PIM, Conditional Access, MFA, SSO and security groups
• Contribute to license entitlements and perform other assigned duties

Required profile

• Master's degree in Cybersecurity, Computer Engineering, Computer Science or a related field with five years of relevant experience, or a university degree with seven years
• Minimum five years of experience in Identity & Access Management, IT Security or related infrastructure engineering
• Fluency in English; working knowledge of an official UN language is an advantage
• Ability to supervise and train teams, communicate with business leaders, and handle confidential data responsibly
• Internally recruited staff only; international recruits must be mobile

Required skills

• Certifications: SC-300, AZ-104, ITIL v4 Foundation and CISSP (CISSP is an added advantage)
• Hands-on experience with One Identity - Identity Manager strongly preferred
• Solid proficiency in Active Directory, Group Policy and Azure Active Directory
• Experience integrating IAM with ERP systems (e.g. SAP, Oracle) and understanding of SAML, OAuth, OpenID Connect
• Strong scripting (PowerShell, SQL or similar) for automating IAM workflows