IAM Engineer
Schibsted
- Norge
- Fast
- Fulltid
As an Identity and Access Management (IAM) specialist, you will spearhead the development and implementation of robust IAM solutions within our growing cybersecurity team. In this pivotal role, you will be responsible for designing, deploying, and managing identities and access controls to ensure the confidentiality, integrity, and availability of our organisation's digital assets. Your expertise will be instrumental in establishing efficient IAM processes and frameworks to meet regulatory requirements and industry best practices. You will report to the Head of Cybersecruity, Bernard Helou.We have several open positions for this role, the main responsibilities are:
- Design, implement and manage Identity and Access Management (IAM) systems, including user provisioning, authentication, authorization, and rights management.
- Develop and enforce IAM policies, procedures, and standards to govern user access and privileges across the organisation's IT infrastructure and applications.
- Monitor IAM systems and access logs to detect and respond to security incidents, unauthorised access attempts, and anomalous user behaviour, minimising the risk of data breaches and insider threats.
- Provide guidance and support to internal stakeholders on IAM-related matters, including access requests, access reviews, and identity governance processes.
- Collaborate with external auditors and regulatory bodies to facilitate security audits and assessments.
- Depending on your experience, provide guidance and mentorship to junior team members, fostering a culture of security awareness and knowledge sharing within the organisation.
We are building the cybersecurity team to support Schibsted Media and the journalists along their journey for free and independent press. Located in Norway and Sweden, the team is responsible for providing, supporting and maintaining cybersecurity tools for the company as well as providing safe products and services to our customers and journalists. We are part of the tech department, the cybersecurity team collaborates with other parts of the organisation, including journalists, editors, it-infrastructure, network, user devices, collaboration software, among others.Key competencies:
- 2 - 8 years of experience in IAM roles, with practical experience in designing, implementing, and managing IAM solutions in enterprise environments.
- Proficiency in IAM technologies and protocols, including LDAP, SAML, OAuth, OpenID Connect, and multi-factor authentication (MFA).
- Understanding of identity governance principles and practices, including access management, entitlement management, and privileged access management (PAM).
- Hands-on experience with IAM platforms such as Okta, Azure Active Directory, SailPoint, or ForgeRock.
- Excellent analytical and problem-solving skills, with the ability to prioritise and manage multiple tasks effectively.
- Strong communication and interpersonal skills, with the ability to collaborate effectively with both technical and non-technical stakeholders.
- Relevant certifications such as CISSP, CISM or CIAM would be appreciated.
- A good understanding of the threat landscape of a media house and how it is different from a “normal” company.