PAM Engineer

ure privileged accounts are managed appropriately, and password change requests are completed on time

• Implement/deliver AOP and Function funded initiatives for myPAM areas

• Identify automation opportunities and gain efficiencies in the myPAM services

• Account Management

• Enhance myPAM onboarding and maintenance processes as appropriate

• Develop/Manage processes to keep myPAM onboarding process/lists evergreen for all sensitive and privileged access for platforms/applications in scope

• Drive participation in the myPAM onboarding process to ensure privileged accounts are managed appropriately, and password change requests are completed on time

• Create, manage, maintain quarterly control processes for myPAM area

• Work with application owners, Controls team, as needed, and ensure myPAM processes are kept up to date

Compensation and Benefits:

• The expected compensation range for this position is between $66,300 - $111,000.

• Location, confirmed job-related skills and experience will be considered in setting actual starting salary.

• Bonus based on performance and eligibility; target payout is 5% of annual salary paid out annually.

• Paid time off subject to eligibility, including paid parental leave, vacation, sick, and bereavement.

• In addition to salary, PepsiCo offers a comprehensive benefits package to support our employees and their families, subject to elections and eligibility: Medical, Dental, Vision, Disability, Health, and Dependent Care Reimbursement Accounts, Employee Assistance Program (EAP), Insurance (Accident, Group Legal, Life), Defined Contribution Retirement Plan.

Qualifications

• A minimum of 1-2 years plus experience in Privileged Access Management using (CyberArk)

• Good to have overall 1-2 years of experience in Identity and Access Management

• Relevant academic education in Engineering, Computer Science, Information Security or significant equivalent experience with excellent communication skills and stakeholder management.

Mandatory Technical Skills:

• Posses working hands on experience on the PAM (CyberArk tool) in a large enterprise/Implementation.

• Should have handled the day-to-day operational tasks on PAM tools such as the ones listed below but not limited to these :

• Vaulting Service accounts and servers.

• Creating and supervising safes and platforms.

• CPM policies management & CPM Compliance.

• Onboarding & offboarding account in CyberArk.

• Policy creation & Privileged account integration.

• Providing safe membership.

• Active Directory Management.

• PACLI, Password Upload Utility & PSM auto IT scripts.

• Prod Support experience of (Vault, CPM, PVWA, PSM).

• Working on day-to-day tickets (ServiceNow).

• Managing servers internally, Vulnerabilities and patch management.

• Good analytical and problem-solving skills. Ability to work with multiple teams.

• Experience in CPM & PSM troubleshooting in PAM.

• Should have strong working knowledge on all CyberArk components as Enterprise Password Vault (EPV) ,Privileged Session Manager (PSM) , Password Vault Web Access (PVWA) ,Central Password Manager (CPM), Application Access Management (AAM - CP, CCP, and ASCP), Endpoint Protection Manager (EPM) and Privileged Threat Analytics (PTA)

• Knowledge of the following core concepts:

Principle of least privileged access

Principle of revocation of rights

Principle of Just In Time access

• Knowledge of programming/scripting disciplines like PowerShell

• Experience working with Windows, macOS, and Unix / Linux platforms

Mandatory Non-Technical Skills:

• Ability to demonstrate analytical and critical thinking, attention to detail, solution orientation in a fast-paced environment

• Good written and oral communication skills in English (other foreign languages well seen)

• A team-focused mentality with the proven ability to work effectively with diverse stakeholders

EEO Statement

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status.

PepsiCo is an Equal Opportunity Employer: Female / Minority / Disability / Protected Veteran / Sexual Orientation / Gender Identity

If you'd like more information about your EEO rights as an applicant under the law, please download the available EEO is the Law & EEO is the Law Supplement documents. View PepsiCo EEO Policy.

Please view our Pay Transparency Statement