About the position
As a PAM Analyst within the Identity and Access Management (IAM) team at PepsiCo, you will play a crucial role in supporting and maintaining the Privileged Access Management (PAM) solution. Your primary responsibility will be to ensure that the PAM systems are up-to-date with the latest upgrades and patches, while also troubleshooting and resolving any issues that arise with the associated tools and support functions. This position is designed for an individual contributor who will work closely with various teams to ensure the smooth operation of PAM solutions across different environments including Development (DEV), Integration Testing Environment (ITE), and Production (PROD). You will be tasked with maintaining the health and accessibility of all environments, ensuring they are functional and secure. This includes coordinating hardware and software refreshes and upgrades, as well as partnering with vendors to address any issues that may arise. A significant part of your role will involve driving participation in the myPAM onboarding process, ensuring that privileged accounts are managed effectively and that password change requests are completed in a timely manner. You will also be responsible for implementing and delivering initiatives funded by the Annual Operating Plan (AOP) and Function for myPAM areas, identifying automation opportunities to enhance efficiency in PAM services, and managing account processes to keep onboarding lists current for all sensitive and privileged access. In addition, you will create and manage quarterly control processes for the myPAM area, collaborating with application owners and the Controls team to ensure that PAM processes are up-to-date and compliant with organizational standards. Your analytical skills will be essential in identifying areas for improvement and ensuring that the PAM solution continues to meet the needs of the organization.
Responsibilities
- Support and maintain the PepsiCo Privileged Access solution by keeping upgrades and patches current.
- Troubleshoot and resolve issues with associated tools and support functions.
- Maintain DEV, ITE, and PROD environments ensuring they are healthy, accessible, and functional.
- Support hardware and software refreshes/upgrades coordinating with appropriate teams.
- Partner with vendors on issues as appropriate.
- Drive participation in the myPAM onboarding process to ensure privileged accounts are managed appropriately.
- Implement/deliver AOP and Function funded initiatives for myPAM areas.
- Identify automation opportunities and gain efficiencies in the myPAM services.
- Enhance myPAM onboarding and maintenance processes as appropriate.
- Develop/manage processes to keep myPAM onboarding process/lists evergreen for all sensitive and privileged access for platforms/applications in scope.
- Create, manage, maintain quarterly control processes for myPAM area.
- Work with application owners and Controls team to ensure myPAM processes are kept up to date.
Requirements
- A minimum of 4 years plus experience in Privileged Access Management using CyberArk.
- Overall 4-5 years of experience in Identity and Access Management is preferred.
- Relevant academic education in Engineering, Computer Science, Information Security or significant equivalent experience.
- Excellent communication skills and stakeholder management.
- Hands-on experience with PAM (CyberArk tool) in a large enterprise/implementation.
- Experience handling day-to-day operational tasks on PAM tools such as vaulting service accounts and servers, creating and supervising safes and platforms, and managing CPM policies.
- Experience in onboarding and offboarding accounts in CyberArk, policy creation, and privileged account integration.
- Experience with Active Directory Management and tools like PACLI, Password Upload Utility, and PSM auto IT scripts.
- Prod Support experience of Vault, CPM, PVWA, PSM.
- Experience working on day-to-day tickets (ServiceNow).
- Good analytical and problem-solving skills, with the ability to work with multiple teams.
- Experience in CPM & PSM troubleshooting in PAM.
- Strong working knowledge of all CyberArk components.
Nice-to-haves
- Knowledge of programming/scripting disciplines like PowerShell.
- Experience working with Windows, macOS, and Unix/Linux platforms.
- Ability to communicate in foreign languages.
Benefits
- Expected compensation range between $66,300 - $111,000.
- Bonus based on performance and eligibility; target payout is 5% of annual salary paid out annually.
- Paid time off including paid parental leave, vacation, sick, and bereavement.
- Comprehensive benefits package including Medical, Dental, Vision, Disability, Health, and Dependent Care Reimbursement Accounts, Employee Assistance Program (EAP), Insurance (Accident, Group Legal, Life), Defined Contribution Retirement Plan.
