Cybersecurity IAM Engineer (Monterrey)

Job Description

Location: Monterrey, Nuevo León, Mexico (Hybrid – candidates must reside in Monterrey or the metropolitan area)

Language requirement: Fluent English (spoken and written)

About The Role

We are seeking a Cybersecurity IAM Engineer to design, implement, and optimize identity and access solutions across our integral infrastructure. This role plays a key part in securing user and system identities across Okta, Azure AD, Active Directory, and AWS IAM, enabling secure digital operations while enforcing Zero Trust and least privilege at scale.

As an IAM Engineer, you'll go beyond processing tickets—you'll build automations, optimize SSO and federation integrations, enforce policy controls through scripting, and work with cross‑functional teams to secure identity lifecycles across IT and OT environments. Come and join a great team who are driving tomorrow’s cybersecurity.

What You’ll Do

• Design, implement, and maintain IAM solutions across Okta, Azure AD, Active Directory, and AWS IAM
• Integrate and manage SSO and MFA for cloud and on‑prem applications using SAML, OAuth, WS‑Federation, and SCIM
• Automate identity workflows, group assignments, access revocations, and certification campaigns using tools like PowerShell, Python, or Okta Workflows
• Enforce access controls aligned to Zero Trust, RBAC, and JML (Joiner‑Mover‑Leaver) lifecycle policies
• Harden IAM configurations in hybrid environments (e.g., password policies, conditional access, privileged account handling)
• Participate in the evaluation and integration of IAM‑related technologies and security enhancements
• Collaborate with IT, cloud, HRIS, and security engineering teams to embed identity governance in enterprise systems
• Assist with privileged access management (PAM), identity federation design, and directory service integrations
• Support audit and compliance efforts by maintaining evidence, resolving control gaps, and improving access visibility

Other duties as assigned.