
Systems and Infrastructure Engineer III, Information Security, IAM/PAM
Walmart
full-time
Posted on:
Location Type: Hybrid
Location: Bentonville • Virginia • United States
Visit company websiteExplore more
Salary
💰 $90,000 - $180,000 per year
Tech Stack
About the role
- Implement and maintain a robust Linux Identity Directory Services and Privileged Access Management (PAM) solution.
- Leverage automation tools to streamline user privileged access management and maintain a secure access environment.
- Develop partnerships with other InfoSec teams, platform, application teams and software vendors for onboarding PAM controls and address any issues.
- Design, implement, and refine enterprise-wide PAM solutions.
- Manage the Privileged human, machine, and service account access across platforms.
- Implement RBAC and risk-based controls for least-privilege access.
- Champion proactive incident response initiatives, leading investigations and remediation efforts for potential privileged account breaches or misuse.
- Design and troubleshoot advanced PAM solutions, providing documentation and recommendations.
- Manage Account/Password Management tools and automate access provisioning/deprovisioning.
- Drive secure integrations across systems.
Requirements
- Option 1: Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 2 years’ experience in systems and infrastructure engineering or related area at a technology, retail, or data-driven company.
- Option 2: 4 years’ experience in systems and infrastructure engineering or related area at a technology, retail, or data-driven company.
- Strong fundamentals of IAM – Identity, Authentication (different factors of authentication), Authorization.
- Be comfortable with using commands and scripting on both Windows and Linux systems.
- Proven ability to design, architect, and implement secure PAM solutions such as (Thycotic, BeyondTrust, CyberArk, Akeyless) at scale.
- Deep understanding of risk-based access control principles and RBAC modeling.
- Proven experience in implementing and managing the entire privileged account lifecycle (provisioning, rotation, monitoring, and deprovisioning) across multiple platforms.
- Extensive hands-on experience installing and upgrading LIDS and PAM products on Linux and Windows, ensuring efficient and successful deployments.
- Experience with automating local administrator, root, database accounts and non-human account onboarding.
- Strong integration expertise and API development skills.
- Experience at enterprise-level corporations (either in retail, financial services, or healthcare).
- Experience with management platforms such as PRTG and Splunk.
- Working with some flavor of Linux Infrastructure Shell / BASH scripting or other scripting language like Python.
- Good understanding of modern Infrastructure deployment methodologies – Virtual Machine, Containers, DevOps, IaaC, Cloud IAAS etc..
- A desire to constantly learn from others and stay aware of new industry trends.
Benefits
- Health benefits include medical, vision and dental coverage.
- Financial benefits include 401(k), stock purchase and company-paid life insurance.
- Paid time off benefits include PTO (including sick leave), parental leave, family care leave, bereavement, jury duty, and voting.
- Other benefits include short-term and long-term disability, company discounts, Military Leave Pay, adoption and surrogacy expense reimbursement, and more.
- Live Better U is a Walmart-paid education benefit program for full-time and part-time associates in Walmart and Sam's Club facilities.
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
LinuxIdentity Directory ServicesPrivileged Access ManagementRBACscriptingAPI developmentIAMrisk-based access controlautomationaccount lifecycle management
Soft Skills
incident responsecollaborationproblem-solvingcommunicationleadership
Certifications
Bachelor's degree in computer scienceBachelor's degree in information technologyBachelor's degree in engineeringBachelor's degree in information systemsBachelor's degree in cybersecurity