Identity & Access Management (IAM) Engineer, Group IT Security at First Quantum Minerals LTD

Job Description 

• Although our production and financial results are the engine that drives our business, it is the depth of capability in our people that will continue to determine First Quantum’s ongoing success. Reporting to the Identity & Access Management Lead, this role will form an integral part of our Group IT Security function. The IAM Engineer will be responsible for the technical implementation, maintenance, and optimisation of Identity and Access Management solutions across the organisation's Digital footprint.

Key Responsibilities:

• The IAM Engineer's general accountabilities include, but are not limited to, the below:
• Implement and configure IAM solutions, including Azure AD/Entra, Active Directory, and Identity Governance platforms to ensure secure and efficient access control for enterprise applications and resources.
• Design and execute technical integrations for Single Sign-On (SSO), Multi-Factor authentication and Identity lifecycle management to enhance security and streamline user authentication processes across the organisation.
• Perform technical configuration and maintenance of Identity Governance and Administration (IGA) tools.
• Conduct technical assessments of identity and access systems, identifying security gaps and recommending improvements.
• Implement and maintain Privileged Access Management (PAM) solutions
• Support the implementation of Just-in-Time (JIT) and Just-Enough-Access (JEA) principles.
• Assist in developing and maintaining technical documentation for IAM processes and configurations.
• Troubleshoot complex identity and access-related technical issues.
• Develop and maintain scripted solutions for identity management.
• Respond to audit findings and implement remediation measures.
• Support the implementation of identity-related security policies and standards.
• Collaborate with Cross-Functional Teams: Work with IT, Security, and Application teams to assess and improve identity and access management solutions, ensuring alignment with business objectives.

Qualifications: 

• A Graduate qualification in Information Security, Computer Science, or Engineering is highly regarded.
• Professional certifications preferred (e.g., Microsoft Identity Professional, ISC2 CC, CompTIA Security+).

Experience & Technical Skills Required:

• 5+ years of hands-on experience in IAM implementation within an Enterprise environment
• Strong technical proficiency with:
• Azure AD/Entra Identity
• Active Directory
• Saviynt EIC
• CyberArk
• Scripting skills (PowerShell)
• Experience with API integrations for identity management
• Strong familiarity with SAML, OAuth, OpenID Connect
• Understanding of identity protocols and security frameworks
• Understanding of regulatory requirements and IAM security best practises
• Experience with identity lifecycle automation tools

Technical Competencies: 

• Detail-oriented with strong analytical skills
• Excellent technical communication abilities
• Proactive approach to learning new technologies
• Ability to work effectively in a team environment
• Ability to diagnose and resolve IAM-related issues and optimise performance
• Quick learner with a passion for cybersecurity technologies