Cyber Security Engineer (IAM Specialist)

Sunrise Farms•Surrey, BC

7d•CA$110,000 - CA$130,000

About The Position

We are looking for a versatile and highly skilled Cyber Security Engineer (IAM Specialist) to play a pivotal role in securing our business and IT operations. As we are actively building and maturing our cyber security program, this role offers a unique opportunity to make a foundational impact. You will serve as our subject matter expert for Identity and Access Management (IAM) and application security, ensuring that all third-party business and IT applications are implemented with a security-first mindset. Because our cyber program is evolving, this is a highly dynamic, cross-functional role. You will have your hands in multiple domains, including security governance, vulnerability management, operational technology (OT) security, and overarching cyber architecture.

Requirements

Proven experience as a Cyber Security Engineer, Application Security Specialist, or IAM Engineer.
Deep technical understanding of the Microsoft security ecosystem, including Azure, Entra ID (Azure AD), and enterprise Windows environments.
Hands-on experience performing threat modeling and risk assessments for third-party software integrations and business apps.
Strong foundational knowledge of identity protocols (SAML, OAuth, OIDC) and enterprise identity management.
Working understanding of broader security domains, including vulnerability management, OT/ICS security concepts, and governance frameworks.
Excellent ability to translate complex cyber risks into clear, actionable business recommendations for non-technical stakeholders.

Responsibilities

Oversee the security architecture and implementation of all third-party IT and business applications (SaaS, COTS, etc.), ensuring they meet organizational security standards.
Conduct comprehensive threat modeling to identify potential vulnerabilities, attack vectors, and design flaws in application deployments.
Assess risks associated with new and existing applications, providing actionable, secure solutions and compensating controls to business stakeholders.
Design, deploy, and manage our IAM lifecycle processes, ensuring the principles of least privilege and zero trust are applied across the organization.
Leverage the Microsoft environment (e.g., Entra ID / Azure AD) to configure and enforce Conditional Access policies, MFA, SSO, and Role-Based Access Control (RBAC).
Regularly audit identities, roles, and permissions to ensure compliance with internal access policies.
Assist in building, configuring, and maintaining vulnerability scanning workflows and coordinating remediation efforts across endpoints, servers, and applications.
Support the secure design and architecture of our OT environments, bridging the gap between standard IT infrastructure and industrial/operational systems.
Contribute to the development of foundational cyber security policies, standards, and compliance frameworks.
Act as a flexible security engineering resource, guiding the secure design of various IT projects and initiatives as the overarching security program scales.