WW-IN-Security-ID132-Centrify PAM-JL09

Job Description:

Job Description – Centrify PAM DevOps
The Centrify PAM DevOps is responsible for the ongoing support and service maturity of the IAM program. Must have experience with Centrify Privileged Access Management and/or an equivalent tool like Thycotic, CyberArk, BeyondTrust PAM etc. maintaining any custom code/config and the following capabilities/functions within the platform and IAM service as a whole.

• Directory Integrations & Services
• Delegated Authentication
• Multifactor Authentication / Adaptive MFA
• Risk & Behavior-based authentication
• Tenant Customizations
• Centrify PAM Command Line
• Python & PowerShell
• Automated Discovery of systems & privileged accounts
• Automated Password Rotation & Reconciliation
• Systems Connection Management
• Privileged Session Management & Recording
• Auditing & Monitoring
• IAM Standards like Header-Based/Kerberos/SAML2.0/OpenID-Connect/OAuth2.0/FIDO2
• PAM Integration with CI/CD Tools such as Jenkins/Terraform/GitHub/SonarQube etc.
• Participate in and/or lead user acceptance testing and bug-related engineering efforts.
   

What You Will Do

• Will need to create vaults.
• Design and Develop IAM solutions based on Centrify PAM platform
• Hands-on experience with Centrify Privileged Access Management - Experience in installation and configurations of Connectors, Directory Integrations, Radius endpoints, OAuth tokens etc.
• Develop and maintain privileged user onboarding workflows, password check in/out, rotation & reconciliation
• Must have a thorough understanding and work experience for Single Sign-On, Access management, Identity Federation, Multi-factor authentication (MFA), Risk-based authentication (RBA).
• Must have a thorough understanding and work experience for capabilities such as SSH, RDP, SMB, Telnet etc. & Header based Single Sign On, SAML, OIDC, OAuth & Radius, etc.
• Hands-On experience with Centrify UI customization, writing PowerShell or python scripts to automatically discover systems, accounts for privileged access mgmt. & also integrate with target systems like CI/CD pipeline or target applications
• Experience with PAM self-service registration integration with Identity management system like SailPoint IdentityIQ.
• RESTful & SCIM API development and maintenance for exposing core PAM functions
• Develop and maintain privileged access provisioning and related services
• Support integration with Active Directory and other Identity Stores
• Good knowledge of directory servers and LDAP protocol technologies (Active Directory)
• Experience with the operating system (Unix/Linux/Windows) commands, utilities & scripting
• Good understanding of TCP/IP and RESTful API experience with infrastructure, network, database, or security troubleshooting & remediation experience with scripting with PowerShell or GO, Python, Etc.
• Experience with DevOps tools such as Jenkins, Artifactory, GitHub, SonarQube, Terraform, Bitbucket, Dockers, Ansible, Kubernetes, etc.
• Provide support for all design, implementation, and maintenance activities related to Centrify PAM
• Implement monitoring of PAM application/service components using tools like Dynatrace etc.

Certifications

• Good to have an IAM or PAM certification
• Good to have any Security certification

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.