Job Description:

Job Description – Centrify PAM DevOps

The Centrify PAM DevOps is responsible for the ongoing support and service maturity of the IAM program. Must have experience with Centrify Privileged Access Management and/or an equivalent tool like Thycotic, CyberArk, BeyondTrust PAM etc. maintaining any custom code/config and the following capabilities/functions within the platform and IAM service as a whole.

Directory Integrations & ServicesDelegated AuthenticationMultifactor Authentication / Adaptive MFARisk & Behavior-based authenticationTenant CustomizationsCentrify PAM Command LinePython & PowerShellAutomated Discovery of systems & privileged accountsAutomated Password Rotation & ReconciliationSystems Connection ManagementPrivileged Session Management & RecordingAuditing & MonitoringIAM Standards like Header-Based/Kerberos/SAML2.0/OpenID-Connect/OAuth2.0/FIDO2PAM Integration with CI/CD Tools such as Jenkins/Terraform/GitHub/SonarQube etc.Participate in and/or lead user acceptance testing and bug-related engineering efforts.
 

What You Will Do

Will need to create vaults.Design and Develop IAM solutions based on Centrify PAM platformHands-on experience with Centrify Privileged Access Management - Experience in installation and configurations of Connectors, Directory Integrations, Radius endpoints, OAuth tokens etc.Develop and maintain privileged user onboarding workflows, password check in/out, rotation & reconciliationMust have a thorough understanding and work experience for Single Sign-On, Access management, Identity Federation, Multi-factor authentication (MFA), Risk-based authentication (RBA).Must have a thorough understanding and work experience for capabilities such as SSH, RDP, SMB, Telnet etc. & Header based Single Sign On, SAML, OIDC, OAuth & Radius, etc.Hands-On experience with Centrify UI customization, writing PowerShell or python scripts to automatically discover systems, accounts for privileged access mgmt. & also integrate with target systems like CI/CD pipeline or target applicationsExperience with PAM self-service registration integration with Identity management system like SailPoint IdentityIQ.RESTful & SCIM API development and maintenance for exposing core PAM functionsDevelop and maintain privileged access provisioning and related servicesSupport integration with Active Directory and other Identity StoresGood knowledge of directory servers and LDAP protocol technologies (Active Directory)Experience with the operating system (Unix/Linux/Windows) commands, utilities & scriptingGood understanding of TCP/IP and RESTful API experience with infrastructure, network, database, or security troubleshooting & remediation experience with scripting with PowerShell or GO, Python, Etc.Experience with DevOps tools such as Jenkins, Artifactory, GitHub, SonarQube, Terraform, Bitbucket, Dockers, Ansible, Kubernetes, etc.Provide support for all design, implementation, and maintenance activities related to Centrify PAMImplement monitoring of PAM application/service components using tools like Dynatrace etc.

Certifications

Good to have an IAM or PAM certificationGood to have any Security certification

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.