Job Description

Cybersecurity Analyst, Identity & Access Management

Location: Calgary Head Office

Job status: Full Time Permanent

Department: Information Services

Is this position safety sensitive: No

Why Join Gibson?

At Gibson, talent acquisition helps build the workforce behind our goals. In this role, you’ll own high impact searches from field operations to the executive level across Canada and the United States, partnering directly with business leaders with the autonomy to shape how we attract exceptional talent. If you thrive on complex searches, proactive sourcing and delivering results, this is an opportunity to make a meaningful impact.

The Opportunity

The Cybersecurity & IAM Analyst is responsible for managing, securing, and monitoring all types of identities and access privileges across enterprise IT environments. The ideal candidate will have strong knowledge of Microsoft Azure, Microsoft Entra ID, and Active Directory, along with a solid understanding of Privileged Access Management (PAM) solutions, cybersecurity principles, identity governance, risk management, and security best practices.

This role requires a security-focused mindset, with the ability to identify potential access risks, recognize unusual identity-related activities, and contribute to the organization's overall security posture.

What You'll Do

• Identity Lifecycle Ownership: Own, maintain, automate, and redesign identity lifecycle processes across Entra ID, Active Directory, and Azure, covering human and non-human identities.
• Identity Security: Define and improve security controls for user accounts, service accounts, application identities, managed identities, and workload identities.
• AI Agent Identity Security: Develop and implement secure identity and access management practices for AI agents, including authentication, authorization, permissions, and identity lifecycle controls.
• Privileged Access Management (PAM): Own and enhance the existing PAM and Entra ID PIM solution, expand its coverage, and develop new use cases aligned with Zero Trust and least privilege principles.
• Access Governance: Continuously improve access provisioning, role management, access reviews, and entitlement management across cloud and on-premises environments.
• Authentication & Access Controls: Maintain and strengthen MFA, SSO, Conditional Access, RBAC, and privileged access controls.
• Security Monitoring & Risk Reduction: Identify identity-related security gaps, reduce excessive permissions, and improve visibility into privileged and high-risk access.
• Automation & Continuous Improvement: Identify opportunities to simplify, standardize, and automate IAM processes while improving security and operational efficiency.
• Security Collaboration: Work with cybersecurity, infrastructure, and application teams to integrate identity security controls into new technologies and business initiatives.
• Contribute to broader cybersecurity initiatives and operational tasks as needed, supporting the team's evolving priorities and security objectives.

What You'll Bring (Required)

• Minimum 5 years of Cybersecurity experience with at least 3 of those years focused on Azure and Entra ID.
• Strong hands-on experience with Conditional Access Policy, Microsoft Entra ID, Active Directory, and Azure, including identity lifecycle management, authentication, and access controls.
• Knowledge of SSO, MFA, Conditional Access, and authentication protocols such as SAML, OAuth 2.0, and OpenID Connect.
• Understanding of cybersecurity fundamentals, identity-related threats, risk management, security monitoring, and incident response.
• Familiarity with securing non-human identities, including service principals, managed identities, and emerging AI agent identity security concepts.
• Ability to design and build custom security dashboards, detection rules, and alerts to improve visibility into identity-related threats and suspicious activities.

Knowledge Considered an Asset

• Knowledge and understanding of Information Technology and Operational Technology.
• Strong understanding of security frameworks and models such as NIST, CIS, and Purdue Model.
• Experience developing and implementing security policies and procedures.
• Certified in Cybersecurity (CISSP, CISM, etc.) or have Microsoft Security certifications.

Working Conditions

• Availability for after-hours and on-call work as needed and willingness to provide technical support back-up when required.
• Calgary Head Office based position with occasional field travel.
• This job is subject to background checks as outlined in Gibson Energy’s Background Checks policy. Background checks may include: employment history verification, reference checks, education and/or credentials verification, credit check and a criminal history check.

What We Offer

Competitive base salary, short-term and long-term incentives, comprehensive benefits, a savings plan, share purchase opportunities and support for professional development and certification, with a company recognized as one of Canada’s Top 100 Employers.

For more information about who we are and what we do, visit www.gibsonenergy.com.