System Architect

Overview

The Identity and Access Management (IAM) Director will be responsible for end-to-end architecture, design, engineering, delivery, and sustain support of Active Directory (AD), Azure Active Directory (AAD), Enterprise LDAP, and Privileged Access Management (PAM) products and services. The Director will lead global teams, driving discussions across various project teams and other staff developers and operations team to ensure that Information Security Guidelines and standards are adhered to while meeting the requirements for the business.

The IAM Director must possess hands on experience with designing and delivering solutions across AD, AAD, PAM services, as well as foundational security infrastructure concepts across operating systems, networking, and n-tiered architectures with good troubleshooting skills.

The IAM Director will be responsible for setting the strategy/roadmap for AD and AAD, architect/solution design, review security findings, plan and implement remediation timely and effectively to reduce risk of compromise. Strong HA/DR, resiliency capabilities for AD, Directories and PAM.

This role has end to end accountability for AD, AAD, LDAP architecting, solutioning, securing and driving programs delivering and managing sustain support successfully with stability

Manage Global PepsiCo LDAPs (AD, AAD, Enterprise LDAP and other instances) products, environments and solutions supporting 700K+ accounts and 380k+ identities

Support the multi-year cloud transformation journey including Azure AD strategy, design, implementation and operationalizing the required technology foundations in a hybrid multi-cloud environment

Ensure appropriate auditing, proactive monitoring, alerting identifying and resolving issues timely enhancing security for AD, AAD services.

Implement appropriate supporting tools for securing and managing AD, AAD effectively

Manage PAM services and platforms/products end to end driving programs, engineering activities, ongoing support

Drive the transformation of PepsiCo PAM solution and the increased onboarding of privileged accounts including IT and OT. The service supports 400K+ current accounts with a growth rate of approximately 3K accounts annually.

Stay current on technologies and industry trends in the areas of responsibility and manage vendor relationships

Manage baseline and investment budgets for areas of responsibility

Manage contractors with vendors for services and licenses partnering with appropriate teams

Drive strategy and roadmap for AD, AAD, PAM, Enterprise Directories

Responsibilities

Technical leader for IAM solutions

Manage engineering and operations teams globally

Manage operational teams across AD, AAD, Directories and PAM driving incident resolution, troubleshooting and issue resolution across areas

Manage Authentication and Authorization utilizing Directory solutions

Gather requirements and guide / recommend the right integration pattern for applications needing AD/AAD services, taking into consideration the impact to the environment and standards set in PepsiCo

Design and implement new patterns as needed to support business requirements for AD/AAD and PAM

Manage tools for Account/Password Management, Privileged Access Request provisioning / de-provisioning of access including recertification end to end

Drive technical integrations across areas of responsibility and ensure the right architecture/design is implemented in enabling the business partnering across appropriate architects and leads

Develop and manage processes for integration, administration and maintenance

Develop general purpose services, usable by a variety of authorized systems and applications

Interaction with application teams to gather requirements, design and deliver solution to integrate with IAM products

Recommend improvements, corrections, remediation or requirements for associated projects

Create and maintain documentation for appropriate IAM related activities and metric reporting

Advocate secure computing practices, procedures, and communicate Information Security best practices throughout the company.

Ability to troubleshoot and resolve issues quickly identifying the best option in an emergency

Ability to work with different teams and interact with technical and business folks across the Enterprise

Drive communications and present across different levels of organization

Drive communications and present across different levels of organization

Qualifications

Bachelor’s Degree required

12+ years overall IT experience

10+ years of experience with architecting and designing AD, AADS

7+ years in other Directories such as ODSEE, OUD

7+ years of experience with Privileged Access Management solutions such as CyberArk

6+ years of information security experience with a focus in IAM

8+ years strong troubleshooting experience with AD, Directories

5+ years of experience with developing tools with LDAP via JNDI preferred

5+ years of experience with web application management

5+ years of working experience with building and using PowerShell, VBS and Pearl scripts

Advanced understanding of user life cycle management, authentication/authorizations, and controls around privileged access

Functional:

Ability to guide teams through complex issues and drive resolution for issues that arise within complex and high-risk applications

Ability to effectively translate technical information between vendors, IT management and other internal and external IT teams

Ability to work with all levels of management to define requirements associated with IAM services, incorporating security best practices

Ability to build project plans, translate directives, and present project deliverables to upper management

Advanced understanding of the broader impact of Information Security from a business perspective

Understanding of business processes associated with identity and access management lifecycle and ability to design and implement solutions that meet complex business requirements preferred

Experience managing global teams that include employees and vendors

Experience managing vendors driving SLAs

Soft Skills

Collaborate across global teams and partner across different levels

Drive global programs across sectors partnering with global teams

Mentor team members

Ability to clearly communicate thoughts and ideas in both oral and written formats.

Self-motivated and ability to prioritize and handle tasks in a fast-paced environment

Proven track record of achieving results through collaboration and teamwork

Foster company success through a professional appearance, being courteous to customers and all PepsiCo associates and by having a positive attitude