Manager, IT

Manager, IT - Privileged Access Management You will be a key technical leader responsible for the overall design, operations and modernization of the enterprise PAM ecosystem. You will blend strategic oversight with deep technical execution – driving continuous improvement, automation and integration across CyberArk, Active Directory, Entra ID and related identity security platforms. Key Responsibilities Lead the end-to-end management of the enterprise PAM platform (CyberArk, Alero, etc.), ensuring secure onboarding, vaulting and lifecycle management of privileged credentials. Define, implement and continuously refine PAM policies, workflows and controls aligned with enterprise IAM standards and Zero Trust principles. Conduct regular assessments to identify privileged account risks and misconfigurations and drive remediation through automation or process redesign. Oversee integration of PAM with Active Directory, Entra ID, SIEM, EDR and ITSM tools to enable end‑to‑end visibility and enforcement of least privilege. Manage PAM health, performance and upgrades, monitoring vault replication, session management, connectors and API integrations to ensure system reliability. Partner with architecture, security operations and infrastructure teams to embed PAM controls into DevOps pipelines, server builds and cloud workloads. Develop and maintain automation scripts (Python, REST API, PowerShell, etc.) to streamline onboarding, access review and reporting processes. Participate in audits, compliance reviews and incident response activities related to privileged access, providing detailed technical insights and evidence. Drive future state PAM roadmap – including passwordless access, JIT privilege elevation and identity threat detection integrations. Required Qualifications Progressive experience in Identity Security or Infrastructure Security with at least 5+ years leading PAM initiatives. Deep technical knowledge of CyberArk (Core PAS, CPM, PSM, PTA, CPM plug‑ins, REST APIs and Alero), with strong understanding of Entra ID and AD integration. Proven experience implementing PAM for servers, applications, DevOps pipelines and cloud workloads. Strong understanding of privileged session management, vault architecture, API integrations and connector configurations. Proficiency in scripting and automation using PowerShell, REST API, Python or equivalent. Solid knowledge of identity security frameworks, least privilege enforcement and Zero Trust access models. Demonstrated ability to communicate complex technical issues to non‑technical stakeholders and drive alignment across teams. Compensation & Benefits New Hire Base Salary Range: $102,100.00 - $127,600.00 Bonus: This position is eligible for a performance‑based bonus as provided by the plan terms and governing documents. Benefits: Coverage for employees (and their eligible dependents) through affordable access to healthcare, protection, and savings for the future, tailored to meet you and your family’s needs. Benefits include physical medical, prescription drug, dental, vision, screenings; social paid time off, company holidays, leave of absence, flexible work arrangements, recognition, training; emotional employee family assistance program, wellbeing programs, family support programs; and financial savings/pension, life, accidental death & dismemberment, disability, discounted perks. Location Chicago/Aon Center, Toronto - Queen’s Quay - Headquarters Equal Opportunity Employer Kraft Heinz is an Equal Opportunity Employer – Underrepresented Ethnic Minority Groups/Women/Veterans/Individuals with Disabilities/Sexual Orientation/Gender Identity and other protected classes. In order to ensure reasonable accommodation for protected individuals, applicants that require accommodation in the job application process may contact NAZTAOps@kraftheinz.com for assistance. #J-18808-Ljbffr