IAM Engineer

About the Role Chevron Global Business Services (GBS), located in Buenos Aires (Puerto Madero), Argentina, is seeking an IAM Engineer to design, engineer, and implement secure, reliable, and scalable Identity and Access Management solutions for Operational Technology (OT) environments. The role focuses on enabling secure access, strengthening identity controls, and supporting OT cybersecurity safeguards while aligning with corporate standards, architecture principles, and operational requirements. What You'll Do

• Design and engineer IAM solutions for OT environments addressing availability, segmentation, compliance, and cyber resilience.
• Engineer Secure Remote Access with MFA and segmented network paths.
• Apply IT/OT IAM principles with Zero Trust, least privilege, RBAC, and access reviews.
• Support MFA design and integration for on-premises and hybrid use cases.
• Engineer IAM lifecycle governance: provisioning/deprovisioning, access reviews, role management, identity governance, and compliance reporting.
• Improve password management and PAM: vaulting, shared accounts, auditability.
• Integrate IAM with OT infrastructure: AD, Windows/Linux, virtualization, databases, certificates, network controls.
• Contribute to OT network design: zones, segmentation, DMZ.
• Automate IAM tasks: Ansible, PowerShell, APIs for deployment, configuration, evidence collection, run-and-maintain.
• Create and maintain technical documentation for IAM designs and configurations. What We're Looking For
• 8+ years of experience in IT/OT or cybersecurity with hands-on IAM design and implementation in OT environments.
• Strong knowledge of Secure Remote Access, MFA, Privileged Access Management (PAM), password management, identity governance, access reviews, and least-privilege RBAC.
• Experience integrating IAM with Active Directory, Windows/Linux servers, virtualization, databases, certificates, and network controls.
• Familiarity with OT network architecture, including zones, conduits, segmentation, firewalls, routers, switches, and DMZ patterns.
• Proficiency in automation and scripting using Ansible, PowerShell, APIs, or similar technologies.
• Ability to collaborate across product teams, architects, cybersecurity specialists, infrastructure teams, vendors, and business units.
• Knowledge of IT/OT cybersecurity concepts and Zero Trust principles adapted to OT environments. Compensation & Benefits
• Bonus program awarded in dollars where feasible
• Premium medical coverage
• Employee Assistance Program (EAP)
• English classes and educational assistance
• Childcare assistance
• Hybrid work schedule
• Performance incentive

Note: Chevron Global Business Services (GBS), based in Buenos Aires (Puerto Madero), is accepting applications for the IAM Engineer role.