> Markdown version of [/jobs/ext/2542804-staff-privileged-access-solutions-manager](https://www.wearedevelopers.com/jobs/ext/2542804-staff-privileged-access-solutions-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Staff Privileged Access Solutions Manager - **Company:** The Hershey Company - **Location:** Hershey, PA, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Active Directory, Application Programming Interfaces (APIs), Amazon Web Services, Server Applications, Microsoft Azure, Cloud Computing, CompTIA Security+, Cyber Security, Databases, Domain Name System (DNS), Identity and Access Management, Virtual Private Networks (VPN), Python (Programming Language), Key Management, Linux System Administration, Windows PowerShell, Azure Active Directory, Zero Trust Network Access, Security Information and Event Management, Cyberark, Firewalls (Computer Science), Infrastructure Automation Frameworks, Information Technology, Hashicorp, SailPoint, Servicenow - **Published:** August 19, 2026 - **Apply:** https://careers.thehersheycompany.com/talentcommunity/apply/1420474100/?locale=en_US ## About the Role * Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field; equivalent experience may be considered. * 5+ years of experience in information technology, cybersecurity, identity and access management, security operations, security architecture, or security governance. * 3+ years of experience supporting, implementing, operating, or leading Privileged Access Management capabilities. * 3+ years of experience leading cross-functional initiatives, technical teams, managed service providers, or partner resources. * Experience partnering with infrastructure, application, cloud, audit, compliance, security operations, and business stakeholders. * Experience supporting audit activities, control testing, remediation tracking, evidence collection, and reporting. * Strong knowledge of privileged account lifecycle management, credential vaulting, session monitoring, access reviews, secrets management, and privileged risk reduction. * Proven ability to influence stakeholders, prioritize workstreams, drive accountability, and deliver measurable outcomes in a complex enterprise environment., * Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related discipline; equivalent experience may be considered., * Experience with CyberArk, BeyondTrust, Delinea, HashiCorp Vault, or similar PAM and secrets management platforms. * Experience integrating PAM solutions with Active Directory, Microsoft Entra ID, SailPoint, ServiceNow, SIEM/SOC tools, cloud platforms, and endpoint privilege management solutions. * Experience with PowerShell, Python, Java, or similar scripting and automation tools. * Knowledge of Windows/Linux administration, networking, firewalls, VPNs, DNS, databases, application servers, and secure configuration practices. * Experience developing PAM metrics, dashboards, reporting, and maturity roadmaps. * Relevant certifications such as CISSP, CISM, CRISC, Security+, CyberArk, BeyondTrust, Delinea, HashiCorp, Azure, or AWS. ## Description This is a unique opportunity to lead the evolution of Hershey's enterprise Privileged Access Management (PAM) program and help protect the company's most critical systems, credentials, and privileged access pathways. As a strategic leader within the Identity and Access Management (IAM) organization, you will define and execute the vision, roadmap, and operating model for Hershey's PAM capability. You will drive initiatives that strengthen privileged access controls, support Zero Trust objectives, improve operational maturity, and reduce enterprise security risk across a complex global environment. Working closely with Information Security, infrastructure, application, cloud, audit, compliance, and business teams, you will lead the full PAM lifecycle from strategy and prioritization through implementation, adoption, measurement, and continuous improvement. This role also provides the opportunity to lead and influence managed service providers, offshore operations, and cross-functional project teams while delivering enterprise-wide security outcomes. What will you do? * Define, enhance, and execute the enterprise PAM strategy, roadmap, governance model, and operating standards. * Lead PAM program planning, prioritization, risk management, resource coordination, and delivery. * Partner with infrastructure, cloud, application, security, audit, compliance, and business teams to prioritize PAM onboarding and adoption based on risk and business impact. * Manage the full privileged account lifecycle, including discovery, onboarding, credential vaulting, rotation, access reviews, session monitoring, and decommissioning. * Expand PAM coverage across administrator accounts, service accounts, application accounts, APIs, secrets, automation credentials, and cloud privileged access. * Oversee PAM platform operations, vendor relationships, managed service delivery, incident support, and overall program performance. * Establish metrics, reporting, adoption indicators, and control effectiveness measures to demonstrate risk reduction and program maturity. * Drive automation, process simplification, operational efficiency, and user experience improvements while maintaining strong security controls. * Support audits, control testing, investigations, remediation activities, and evidence collection. * Provide leadership and direction to internal resources, managed service partners, and cross-functional project teams. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [Securing Secrets in the GitOps era](https://www.wearedevelopers.com/videos/546-securing-secrets-in-the-gitops-era) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Building Security Champions](https://www.wearedevelopers.com/magazine/87-building-security-champions)