General Information

City
Cary
State/Province
North Carolina
Country
United States
Department
Information Management
Date
Friday, May 24, 2024
Working time
Full-time
Ref#
20033288
Job Level
Specialist
Job Type
Experienced
Job Field
Information Management
Seniority Level
Mid-Senior Level
Currency
USD - United States - US
Annual Base Salary Minimum
83,520
Annual Base Salary Maximum
167,040
The salary range above represents the low and high end in the local currency of Xerox’s salary range for this position and is reflected in an annualized amount. Actual salaries will vary based on factors including, but not limited to, geographic location, market competition, and/or the successful applicant’s education, experience, knowledge, skills, and abilities. The range listed is just one component of Xerox’s total compensation package for employees. Employees are also afforded a comprehensive suite of benefits, to view those details please visit Xerox Careers for your applicable country. If you are not reviewing this job posting on Xerox Careers, we cannot guarantee the validity of this posting. For a list of our current internal postings, please visit Xerox Careers.

Description & Requirements

About Xerox Holdings Corporation
For more than 100 years, Xerox has continually redefined the workplace experience. Harnessing our leadership position in office and production print technology, we’ve expanded into software and services to sustainably power today’s workforce. From the office to industrial environments, our differentiated business solutions and financial services are designed to make every day work better for clients — no matter where that work is being done. Today, Xerox scientists and engineers are continuing our legacy of innovation with disruptive technologies in digital transformation, augmented reality, robotic process automation, additive manufacturing, Industrial Internet of Things and cleantech. Learn more at www.xerox.com and explore our commitment to diversity and inclusion.

The Lead Identity & Access Management / Privileged Access Management Engineer ("Lead IAM/PAM Engineer") supports the Identity and Access Management (IAM) program within Xerox Cyber Security organization. The qualified candidate is responsible for building and deploying effective IAM/PAM technologies, solutions, and processes across the enterprise in collaboration with business, IT and other Cyber Security professionals.

Primary Responsibilities:

Privileged Access Management (PAM):
  • Design, implement, and maintain Privileged Access Management solutions using Delinea Secret Server Cloud (i.e. Thycotic PAM) to ensure secure access to critical systems and data.
  • Develop and enforce access policies for privileged users across the organization.
  • Collaborate with cross-functional teams to integrate PAM solutions into existing infrastructure.
  • Monitor and analyse privileged access activities for signs of unauthorized or suspicious behaviour including back-door access (if any).
  • Conduct regular access reviews and audits to ensure compliance with security policies.
  • Respond to and resolve security incidents related to privileged access in a timely manner.
  • Lead PAM operations and coordinate with the vendor for critical issues/incidents resolution
  • Serve an SME on the team for guiding business and application teams for securing privileged access using the PAM capabilities
 
Identity and Access Management (IAM):

  • Design, implement, and manage Identity and Access Management solutions to ensure secure and efficient user access to systems and applications.
  • Integrate IAM solutions with existing directory services and authentication systems (i.e. Active Directory/Azure AD etc.).
  • Collaborate with stakeholders to gather requirements and ensure IAM solutions meet business needs.
  • Implement multi-factor authentication (MFA) and single sign-on (SSO) solutions using Azure AD.
  • Participate in security audits and assessments to ensure compliance with industry regulations.
  • Collaborate with other IAM engineers and architects on major initiatives.
  • Be a strong individual contributor who improves IAM service offerings.
  • Develop and maintain IAM technical documentation, code repositories, and development environments.
  • Provide guidance to IAM operations team and serve as escalation point for resolving operational incidents.
  • Operate as a technical subject matter expert and advise project teams regarding integration with IAM technologies.

Knowledge and Skills Required:

  • Hands-on experience of configuring Delinea Secret Server Cloud solution (Thycotic PAM) or CyberArk including plugin configurations, secrets onboarding, define secrets templates, integration with enterprise SSO solution (using SAML 2.0/OpenID) for user authentication/authorization, user onboarding, secret access workflows etc.
  • Microsoft Active Directory / Azure Active Directory
  • Proficiency in one or more programming and scripting languages: Java, C++, PowerShell, Perl, Python etc.
  • Strong written and verbal communication skills
  • Experience working across multiple teams on projects
  • Strong organizational and attention to detail skills
  • Uncompromising personal and professional integrity and ethics

Education and Experience Required:
  • B.S in computer science, information systems, information security, engineering or related field
  • Industry-standard security (such as CISSP) or IAM certifications would be a plus
  • 8 years of experience in the field of IT services with over 5 years of experience in the Identity and Access Management domain with specialization in Privileged Access Management (PAM).
  • Vendor solutions and product specific certifications (i.e. Delinea Secret Server Cloud) is a plus.

Location:  Cary, NC