Privileged Acces Manager

Stefanini LATAM; Región Centro; On-site; MXN 700,000 - 1,000,000; Full time

Job summary

Stefanini LATAM is seeking a skilled Security specialist to lead the secure separation, migration, and configuration of PAM and Secrets Management environments during corporate divestiture initiatives. You will design, implement, and maintain CyberArk solutions for privileged accounts, credential rotation, session monitoring, and access control.

Additionally, you will deploy and manage HashiCorp Vault for secure secret storage, dynamic credentials, and encryption services, while developing

Qualifications

• Bachelor's degree or equivalent practical experience.
• 3 years of experience leading PAM and Secrets Management migrations during divestitures.
• Hands-on CyberArk and HashiCorp Vault administration.
• Strong knowledge of privileged access controls, credential rotation, and least privilege.
• Experience integrating security solutions with cloud, Kubernetes, CI/CD, identity providers, directory services, and SIEM tools.
• Proficient in Python, PowerShell, or HCL scripting.
• Experience with security architecture, access policies, compliance, and documentation.

Responsibilities

• Lead secure separation, migration, and configuration of PAM and Secrets Management in divestiture initiatives.
• Design, implement, and maintain CyberArk solutions for privileged accounts and access control.
• Deploy and manage HashiCorp Vault for secure secret storage, dynamic credentials, and encryption.
• Develop and enforce access policies and least privilege controls across infrastructure and applications.
• Integrate PAM and Secrets Management with identity systems, cloud platforms, Kubernetes, CI/CD, and security monitoring tools.
• Monitor platform performance and security events, troubleshoot issues, and support incident response.
• Maintain architecture diagrams, runbooks, and standard operating procedures.
• Collaborate with security, infra, application, and compliance teams to ensure secure operations.

Skills

Privileged access controls

Least privilege

Credential rotation

Secrets management

Security architecture

Documentation

Automation scripting

Education

Bachelor's degree in Computer Science, Information Security, or a related field

Tools

CyberArk

HashiCorp Vault

Kubernetes

CI/CD pipelines

Python

PowerShell

HCL

Cloud platforms

SIEM tools

Identity providers

Job description

At Stefanini we are more than 30,000 geniuses, connected from more than 40 countries, we co-create a better future.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• 3 years of experience leading the secure separation, migration, and configuration of PAM and Secrets Management environments during corporate divestiture initiatives
• Hands-on experience implementing, configuring, and managing CyberArk and HashiCorp Vault.
• Strong knowledge of privileged access controls, credential rotation, secrets storage, encryption, and least privilege principles.
• Experience integrating security solutions with cloud platforms, Kubernetes, CI/CD pipelines, identity providers, directory services, and SIEM tools.
• Proficiency in Python, PowerShell, or HCL for scripting and automation.
• Experience with security architecture, access policies, compliance, and technical documentation.

Responsibilities

• Lead the secure separation, migration, and configuration of PAM and Secrets Management environments during corporate divestiture initiatives.
• Design, implement, and maintain CyberArk solutions for privileged accounts, credential rotation, session monitoring, and access control.
• Deploy and manage HashiCorp Vault for secure secret storage, dynamic credentials, encryption services, and automated secret delivery.
• Develop and enforce access policies, least privilege controls, and security best practices across infrastructure and applications.
• Integrate PAM and Secrets Management solutions with enterprise identity systems, cloud platforms, Kubernetes, CI/CD pipelines, and security monitoring tools.
• Monitor platform performance and security events, troubleshoot issues, and support incident response activities.
• Maintain technical documentation, architecture diagrams, runbooks, and standard operating procedures.
• Collaborate with security, infrastructure, application, and compliance teams to ensure secure and reliable operations.