PAM Engineer (CyberArk)

Company Description

NBCUniversal owns and operates over 20 different businesses across 30 countries including a valuable portfolio of news and entertainment television networks, a premier motion picture company, significant television production operations, a leading television stations group, world-renowned theme parks and a premium ad-supported streaming service.

Here you can be your authentic self. As a company uniquely positioned to educate, entertain and empower through our platforms, Comcast NBCUniversal stands for including everyone. We strive to foster a diverse and inclusive culture where our employees feel supported, embraced and heard. We believe that our workforce should represent the communities we live in, so that together, we can continue to create and deliver content that reflects the current and ever-changing face of the world. Click here to learn more about Comcast NBCUniversal’s commitment and how we are making an impact.

Job Description

The Privileged Access Management (PAM) Engineer critical member of the NBCU Cyber Security IAM team. They will analyze, develop, and build processes and technology, to ensure timely delivery of PAM services. The PAM engineer is remote but will be expected to travel as needed by the base; and will be expected to contribute to overall design and long-term strategy of the Privileged Access and Identity Management program,

As PAM Security Engineer you will:

• Delivery of the Privileged Access Management (PAM) technologies, including accounts management, secrets management, and software and systems patching.
• Lead projects to develop and deliver new security features and expand coverage to new use cases.
• Work with PAM team to implement and automate processes for administration and integration with external services.
• Contribute to PAM Security Strategy, including provisioning, password management and access policies, SSH key management, API key management, and reporting.
• Design, configure, and maintain PAM solutions for Linux, Unix, Windows, Network, and other IT systems.
• Integrate the PAM solution with various technologies such as Service Now, VMWare, SailPoint or other top IDM solutions
• Provide security consultation on internal projects focusing on business needs and how data is transmitted internally and externally.
• Authoring and maintaining documentation procedures, inventories, and diagrams for PAM systems and processes.
• Monitors and responds to capacity and performance needs of the PAM infrastructure.
• Provides regular reports to leadership regarding security, capacity, usage, and licensing
• Provide support for production PAM infrastructure systems and processes

Qualifications

• Bachelor's Degree in Information Technology, Computer Science or other related fields
• Industry certifications in cyber or identity security attesting to broad knowledge of security best practices and design.
• 3 years administering and maintaining multiple Privileged Access Management (PAM) solutions, such as CyberArk, Remediant, Centrify, HashiVault, or BeyondTrust
• Experience working in large security access system upgrades/projects
• Demonstrates an understanding of how PAM integrates with common resources such as Windows, Mac, Linux/UNIX, VMWare, Azure, SQL/Oracle/DB2 database systems, and Network appliances.
• Background working in a large IT organization with responsibility for supporting the technology and processes in the Privileged Access Management domain and controls program, preferably in a financial services organization
• Experience with Identity and Access Management vendors like Microsoft, SailPoint, ServiceNow, CyberArk, etc.
• Significant experience administering tier zero identity infrastructure
• Experience with Service Life Cycle or Agile Frameworks
• Strong verbal and written communication skills
• Demonstrated research, analytical, and problem-solving skills
• Effective in producing desired results and achieving goals and objectives
• Practical skills presenting findings, conclusions, alternatives, and information clearly and concisely
• Experience in developing automated solutions and processes using PowerShell for Windows and BASH for UNIX/Linux.
• Must submit an attestation disclosing your COVID-19 vaccination status and, if partially or fully vaccinated, submitting your vaccination record no later than 7 days following commencement of employment.
• Must be fully vaccinated against COVID-19 at the commencement of employment or adhere to enhanced protocols in select work settings or where jurisdictionally mandated.
• Must be willing to adhere to all Company COVID-19 workplace safety policies and protocols.

Desired Characteristics
• Self-starter
• Fast learner and the ability to understand large complex infrastructures
• Expertise working on a team with motivated cross-functional individuals
• The ability to work with demanding customers
• The ability to work as part of a team and share knowledge
• The ability to work directly with Customers and understand their needs and concerns
• Excellent communication and customer service skills
• Ability to work across platforms and with various support teams
• Ability to want to learn and grow
• Must be a team player

This position is eligible for company sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks. Learn more about the benefits offered by NBCUniversal by visiting the Benefits page of the Careers website. 

Salary range: $113,000-$147,000

Additional Information

NBCUniversal's policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law. NBCUniversal will consider for employment qualified applicants with criminal histories in a manner consistent with relevant legal requirements, including the City of Los Angeles Fair Chance Initiative For Hiring Ordinance, where applicable.

If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access nbcunicareers.com as a result of your disability. You can request reasonable accommodations in the US by calling 1-818-777-4107 and in the UK by calling +44 2036185726.