Staff Privileged Access Solutions Manager

The Hershey Company
Hershey, PA, United States
16 days ago
Apply on careers.thehersheycompany.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
3 years minimum
Working hours
Regular working hours

Tech stack

Java (Programming Language) Active Directory Application Programming Interfaces (APIs) Amazon Web Services Server Applications Microsoft Azure Cloud Computing CompTIA Security+ Cyber Security Databases Domain Name System (DNS) Identity and Access Management
+15 more
Virtual Private Networks (VPN) Python (Programming Language) Key Management Linux System Administration Windows PowerShell Azure Active Directory Zero Trust Network Access Security Information and Event Management Cyberark Firewalls (Computer Science) Infrastructure Automation Frameworks Information Technology Hashicorp SailPoint Servicenow

Job description

This is a unique opportunity to lead the evolution of Hershey’s enterprise Privileged Access Management (PAM) program and help protect the company’s most critical systems, credentials, and privileged access pathways. As a strategic leader within the Identity and Access Management (IAM) organization, you will define and execute the vision, roadmap, and operating model for Hershey’s PAM capability. You will drive initiatives that strengthen privileged access controls, support Zero Trust objectives, improve operational maturity, and reduce enterprise security risk across a complex global environment. Working closely with Information Security, infrastructure, application, cloud, audit, compliance, and business teams, you will lead the full PAM lifecycle from strategy and prioritization through implementation, adoption, measurement, and continuous improvement. This role also provides the opportunity to lead and influence managed service providers, offshore operations, and cross-functional project teams while delivering enterprise-wide security outcomes.

What will you do?

  • Define, enhance, and execute the enterprise PAM strategy, roadmap, governance model, and operating standards.
  • Lead PAM program planning, prioritization, risk management, resource coordination, and delivery.
  • Partner with infrastructure, cloud, application, security, audit, compliance, and business teams to prioritize PAM onboarding and adoption based on risk and business impact.
  • Manage the full privileged account lifecycle, including discovery, onboarding, credential vaulting, rotation, access reviews, session monitoring, and decommissioning.
  • Expand PAM coverage across administrator accounts, service accounts, application accounts, APIs, secrets, automation credentials, and cloud privileged access.
  • Oversee PAM platform operations, vendor relationships, managed service delivery, incident support, and overall program performance.
  • Establish metrics, reporting, adoption indicators, and control effectiveness measures to demonstrate risk reduction and program maturity.
  • Drive automation, process simplification, operational efficiency, and user experience improvements while maintaining strong security controls.
  • Support audits, control testing, investigations, remediation activities, and evidence collection.
  • Provide leadership and direction to internal resources, managed service partners, and cross-functional project teams.

Requirements

  • Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field; equivalent experience may be considered.
  • 5+ years of experience in information technology, cybersecurity, identity and access management, security operations, security architecture, or security governance.
  • 3+ years of experience supporting, implementing, operating, or leading Privileged Access Management capabilities.
  • 3+ years of experience leading cross-functional initiatives, technical teams, managed service providers, or partner resources.
  • Experience partnering with infrastructure, application, cloud, audit, compliance, security operations, and business stakeholders.
  • Experience supporting audit activities, control testing, remediation tracking, evidence collection, and reporting.
  • Strong knowledge of privileged account lifecycle management, credential vaulting, session monitoring, access reviews, secrets management, and privileged risk reduction.
  • Proven ability to influence stakeholders, prioritize workstreams, drive accountability, and deliver measurable outcomes in a complex enterprise environment., * Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related discipline; equivalent experience may be considered., * Experience with CyberArk, BeyondTrust, Delinea, HashiCorp Vault, or similar PAM and secrets management platforms.
  • Experience integrating PAM solutions with Active Directory, Microsoft Entra ID, SailPoint, ServiceNow, SIEM/SOC tools, cloud platforms, and endpoint privilege management solutions.
  • Experience with PowerShell, Python, Java, or similar scripting and automation tools.
  • Knowledge of Windows/Linux administration, networking, firewalls, VPNs, DNS, databases, application servers, and secure configuration practices.
  • Experience developing PAM metrics, dashboards, reporting, and maturity roadmaps.
  • Relevant certifications such as CISSP, CISM, CRISC, Security+, CyberArk, BeyondTrust, Delinea, HashiCorp, Azure, or AWS.

Benefits & conditions

At Hershey, we offer competitive pay and a comprehensive total rewards package designed to support your wellbeing, financial security, and life outside of work.

  • Health & Wellbeing: Medical, dental, and vision coverage, plus wellness programs that support your physical and mental health.
  • Financial Security: Competitive pay, annual incentive opportunities, and a 401(k) with company match.
  • Time Off & Flexibility: Paid time off, company holidays, and flexible ways of working where applicable.
  • Growth & Development: Career development programs, learning opportunities, and internal mobility.

About the company

At The Hershey Company, our culture is rooted in purpose and inspired by Milton Hershey’s enduring vision that business should create opportunity for others. Through our commitment to corporate philanthropy, we create positive impact by supporting communities, helping children thrive, and operating as a business for good. This includes our deep and long standing partnership with Milton Hershey School, where we invest in education, workforce readiness, and hands on engagement to help students succeed beyond the classroom. Supported by strategic grantmaking, product donations, cross brand collaboration, and strong employee volunteerism, Hershey offers a place to work where making a difference-locally and globally-is part of how we do business every day., The Hershey Company is an industry-leading snacks company known for making more moments of goodness through its iconic brands. With a strong portfolio across chocolate, confectionery, and salty snacks, Hershey delights consumers every day. Our beloved brands include Hershey’s, Reese’s, KitKat®, Dots Pretzels, Lesser Evil, Jolly Rancher, Twizzlers, Ice Breakers, and more. At Hershey, we are committed to making a meaningful difference in the communities where we live, work, and do business. This commitment originated with our founder, Milton Hershey, and continues to shape who we are today. Guided by our employee value proposition, Lead Today. Create Tomorrow, we empower our people to drive impact now while shaping what comes next. Our One Hershey mindset brings teams together across functions, geographies, and businesses, enabling us to operate with speed, collaboration, and shared purpose. The Hershey Company is proud to be recognized as a top employer in the United States, reflecting our commitment to our people, culture, and purpose.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on careers.thehersheycompany.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

5:24 min

Demonstrating database encryption at rest with HashiCorp Vault

Alex Soto Alex Soto · LIVE

4:07 min

Preparing tools and authentication for automation

Johannes Ostner Johannes Ostner · Europe 2026 Virtual

2:39 min

Generating dynamic application secrets using HashiCorp Vault engines

Alex Soto Alex Soto · LIVE

2:08 min

Managing complex structures and corporate guidelines

Alexandra Petri · World Congress 2023

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

4:44 min

Core features of Terraform and HashiCorp Configuration Language

Hennie Francis · LIVE

Videos

See all

Related articles

See all