Anticipated End Date:2026-09-05
Position Title:Information Security Advisor, PAM
Job Description:JR200595 Information Security Advisor, PAMMaintains enterprise information security policies, technical standards, guidelines, procedures, and other elements of an infrastructure necessary to support information security in compliance with established company policies, regulatory requirements, and generally accepted information security controls. Responsible for the delivery of strategic network security, access control and secure transaction/messaging solutions. Ensures security solutions involving the use of technologies are well-conceived, designed and implemented in compliance with enterprise standards.
LOCATION: Hybrid 1: This role requires associates to be in-office 1 day per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace.
Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless accommodation is granted as required by law.
How you will make an impact:- Develops the technical implementation roadmap, deployment approach, migration strategy, and onboarding methodology.
- Translates PAM and security requirements into Delinea configuration and implementation standards.
- Coordinates technical activities across IAM, infrastructure, Active Directory, cloud, security engineering, server operations, and application teams.
- Serves as the primary technical lead for Delinea implementation decisions, issues, dependencies, and escalations.
- Partners with Delinea professional services, vendor engineering, and internal technology teams as required.
- Provides first level engineering design functions and trouble resolution.
- Provides trouble resolution and serves as point of technical escalation on complex problems
- Leads or plans implementations for access management and network security technologies.
- Develops testing plans to ensure quality of implementation; leads the investigation and reporting of data security events and incidents.
- Provides system and network architecture support for information and network security technologies.
- Provides technical support to business and technology associates in risk assessments and implementation of appropriate information security procedures, standards and technologies.
- Maintains security incident response plans.
- Represents major upgrades and business system replacements in change control.
- Oversees Enterprise mix of vendor services.
- Recommends changes and updates to strategy; may act a key contact for setting vendor strategy.
- Designs & engineers repetitive technical solutions based on business requirements and defined technology standards.
- Develops support procedures and performance metrics reports.
- Leads level 1 & 2 incident recoveries.
- May organize the efforts of other analysts as part of incident recovery.
- Leads root cause analysis efforts.
- Must be capable of providing top-tier support for 4 or more of the information security technology common body of knowledge skill sets: 1) Access Control, 2) Application Security, 3) Business Continuity and Disaster Recovery Planning, 4) Cryptography, 5) Information Security and Risk Management 6) Legal, Regulations, 7) Compliance and Investigations, 8) Operations Security, 9) Physical (Environmental) Security, 10) Security Architecture and Design, 11) Telecommunications and Network Security.
Minimum Requirements:- Requires BS/BA degree in Information Technology or related field of study and a minimum of 5 years' experience in systems support, system administration, system engineering, system security, access management, network security, network communications, computer networking, telecommunications, systems development and management, hardware, software, and/or data; or any combination of education and experience, which would provide an equivalent background.
- Requires experience in planning and designing highly complex systems.
Preferred Skills, Capabilities, and Experiences:- Hands-on implementation experience with Delinea Server Suite or related Delinea PAM technologies.
- Experience migrating from legacy PAM or server privilege-management platforms.
- Experience with cloud platforms such as Azure, AWS, or Google Cloud.
- Experience with ServiceNow, SIEM, IGA, CMDB, or enterprise automation platforms.
- Familiarity with PowerShell, Python, shell scripting, REST APIs, Ansible, Terraform, or similar automation technologies.
- Experience with multiple technical and business disciplines is highly preferred.
- Security Certifications: CISSP or other technical security certifications (e.g. Systems Security Certified Practitioner, Certification and Accreditation Professional) strongly preferred.
- Minimum 5 years of experience in IAM, Privileged Access Management, cybersecurity, infrastructure engineering, or related technology disciplines.
- Hands-on experience implementing enterprise PAM technologies.
- Strong experience with Windows and Linux/Unix server administration and privileged-access concepts.
- Experience with Active Directory, authentication, authorization, groups, roles, and enterprise directory services.
- Understanding of least privilege, administrative access, privilege elevation, and privileged account management.
- Candidates from all states are welcome, but they must reside within commuting distance of an Elevance Health Pulse Point office location.
Job Level:Non-Management Exempt
Workshift:1st Shift (United States of America)
Job Family:IFT > IT Security & Compliance
Please be advised that Elevance Health only accepts resumes for compensation from agencies that have a signed agreement with Elevance Health. Any unsolicited resumes, including those submitted to hiring managers, are deemed to be the property of Elevance Health.
NOTE: Workday keeps job postings active through 11:59:59 PM on the day before the listed end date. Example: If the end date is 3/13, the posting will automatically come down on 3/12 at 11:59:59 PM. In other words - the job is posted until 3/13, not through 3/13.
