Information and Communications Technology

Organizational context: Established in 1951, IOM is the leading UN agency for migration, promoting humane and orderly migration globally. The organization works with partners to save lives, protect people on the move, and facilitate pathways for regular migration. The ICT Officer (Identity and Access Management) role sits within the Information and Communications Technology (ICT) department, reporting to the Chief Technology Officer.

Job purpose: The ICT Officer (Identity and Access Management) is responsible for leading and evolving IOM's identity and access management (IDAM) ecosystem. This role acts as the gatekeeper for digital identity, ensuring appropriate access for individuals and devices.

Key responsibilities
include designing, implementing, and supporting identity orchestration using One Identity
- Identity Manager, integrated with Microsoft Active Directory, Azure Active Directory, and Oracle ERP. The position requires expertise in automating access, enforcing least privilege principles, and mitigating identity-related risks to enhance overall security and operational efficiency within the organization.

Responsibilities:

Key responsibilities
include designing, configuring, and maintaining the One Identity
- Identity Manager (IDAM) system for user lifecycle management, provisioning, and role-based access control. This involves integrating identity data from the WAVE ERP system for Joiner/Mover/Leaver (JML) processes and managing synchronization and federation between Microsoft Active Directory and Azure Active Directory (Entra ID). The role also encompasses defining and implementing access governance, including role modeling, segregation of duties (SoD), and access review campaigns, alongside developing automated workflows for account provisioning and deprovisioning. Collaboration with HR, Information Security, and Compliance teams is essential for enforcing identity policies and Just-In-Time (JIT) access. Additionally, the role involves managing Microsoft Active Directory and Entra ID, including hybrid identity sync, entitlement management, and the configuration of Conditional Access Policies and MFA. The ICT Officer will also be responsible for publishing and managing SaaS applications for Single Sign-On (SSO) and building processes to enforce user consent restrictions. Creating and maintaining IAM documentation, supervising the IAM team, and providing input for license entitlements are also key duties.

Education:
A Master's degree in Cybersecurity, Computer Engineering, Computer Science, or a related field with five years of relevant experience, or a University degree with seven years of relevant experience. Required certifications include Microsoft Certified: Identity and Access Administrator Associate (SC-300) and Microsoft Certified: Azure Administrator Associate (AZ-104). ITIL v4 Foundation and CISSP certifications must be attained and maintained. One Identity
- Identity Manager Foundations and CISSP are considered advantageous.

Work

experience:
Requires a minimum of 5 years of experience in Identity & Access Management, IT Security, or related infrastructure engineering. Essential experience includes hands-on work with One Identity
- Identity Manager, proficiency in Microsoft Active Directory and Azure Active Directory (Entra ID), and experience integrating IAM solutions with ERP systems for automated provisioning. Understanding of authentication/authorization protocols (SAML, OAuth, OpenID Connect) and experience implementing RBAC, ABAC, and SoD controls are also necessary. Strong scripting abilities (PowerShell, SQL) for automation are required.

Skills:
Supervision and team training, project management, automation of user lifecycle processes (HR, AD, Entra ID), effective communication with technical and non-technical stakeholders, handling confidential data responsibly, familiarity with global IT security trends and NIST standards, and working knowledge of One Identity Manager, Active Directory, and Entra ID.

Required languages: English

Desired languages: Arabic, French, Russian, Spanish