Senior Technical Lead - Privileged Access Management
About the role
Sysco LABS is seeking a Senior Technical Lead - Privileged Access Management to join their global Cybersecurity Team. The role involves leading a team of engineers to support and manage Sysco’s enterprise-wide Privileged Access Management (PAM) infrastructure, ensuring secure access for over 80,000 global users. Responsibilities include planning, architecting, implementing, and managing privileged accounts using PAM solutions such as CyberArk and HashiCorp, collaborating with cross-functional teams, and mentoring team members. The position is highly visible within the organization and plays a crucial role in Sysco’s cybersecurity and identity governance initiatives.
Must have
- Bachelor’s degree in computer science, Information Systems, Engineering, or a related field; or equivalent work experience.
- Master’s degree in information technology, Cybersecurity, or a related discipline.
- Overall 8 to 10+ years of experience in IT industry with minimum 5 to 6 years in Privileged Access Management (PAM).
- Extensive experience in end-to-end implementation, configuration, and administration of privileged access management (PAM) solutions such as CyberArk Vault, CyberArk Workforce Password Management (WPM) CyberArk End Point Manager (EPM) and HashiCorp Vault.
- Strong Knowledge on Cybersecurity principles, best practices and NIST standards, with focus on securing privileged access, key management, human and machine identities, Infrastructure as Code (e.g. Terraform).
- Expert level knowledge of privileged access management concepts, best practices and Zero Trust principle.
- Familiarity with SailPoint to implement and support CyberArk-SailPoint Integration using SCIM (System for cross-domain Identity Management) protocol.
- The person should have exposure knowledge of CyberArk integration with SIEM Tools (Datadog, MS Sentinel, HP ArcSight).
- Excellent oral and written communication skills, with the ability to engage with stakeholders across global workforce.
- Certifications in Cyber Security.
- Certifications in CyberArk Vault, CISSP .
- Incident management using Tools like ServiceNow, monitoring Tools like Datadog, MS Sentinel.
- Proficiency with authentication and authorization protocols including SAML, OIDC, OAuth2, WS-Fed, Kerberos, and NTLM.
- PowerShell, Python, REST API for automation in CyberArk Vault tasks, reporting etc.
- CyberArk Vault (On-Prem and SaaS) supporting global enterprises.
- CyberArk Workforce Password Management (WPM) and CyberArk End Point Manager (EPM), CyberArk CONJUR solutions.
- HashiCorp Vault, Terraform, Dev Ops Tools (Kubernetes, Jenkins etc.).
- Integration of privileged management solutions (CyberArk Vault) with tools such as Active Directory, AWS/Azure/GCP, SAML, SMTP, NTP.
- Secrets management using Tools like Hashi Corp Vault, AWS Secrets Manager.
Technologies
- Active Directory
- Authentication
- AWS
- Azure
- CISSP
- CyberArk
- Cybersecurity
- Datadog
- GCP
- Infrastructure as Code
- Jenkins
- Kubernetes
- NIST
- OAuth
- OpenID
- PowerShell
- Python
- REST
- SaaS
- SAML
- SCIM
- Secrets Management
- ServiceNow
- SIEM
- Terraform
- Vault
- Zero Trust
Highlights
This is a hybrid remote and office-based role with a primary shift of 2:00PM-10:00PM SLST (3:30AM-11:30AM CDT), and may require shift rotation for global on-call coverage. Benefits include a performance-based annual bonus, special allowances for health, wellness, and academics, entertainment and team engagement allowances, and comprehensive health and life insurance extendable to parents and in-laws. Sysco LABS is an Equal Opportunity Employer.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka